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VOLUME  XII 
IN  THE  UNITED  STATES  ARMY 

UNITED  STATES 
VS. 

MANNING,    Bradley  E.,    PFC  COURT-MARTIAL 
U.S.   Army,  xxx-xx-9504 

Headquarters  and  Headquarters  Company, 

U.S.   Army  Garrison, 

Joint  Base  Myer-Henderson  Hall, 

Fort  Myer,   VA  22211 

 / 

The  Hearing  in  the  above-entitled  matter  was 
held  on  Friday,   June  28,    2013,   commencing  at  9:30  a.m., 
at  Fort  Meade,  Maryland,   before  the  Honorable  Colonel 
Denise  Lind,  Judge. 
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DISCLAIMER 

This  transcript  was  made  by  a  court 
reporter  who  is  not  the  official  Government  reporter, 
was  not  permitted  to  be  in  the  actual  courtroom  where 
the  proceedings  took  place,  but  in  a  media  room 
listening  to  and  watching  live  audio/video  feed,  not 
permitted  to  make  an  audio  backup  recording  for 
editing  purposes,   and  not  having  the  ability  to 
control  the  proceedings  in  order  to  produce  an 
accurate  verbatim  transcript . 

This  unedited,   uncertified  draft 
transcript  may  contain  court  reporting  outlines  that 
are  not  translated,   notes  made  by  the  reporter  for 
editing  purposes,  misspelled  terms  and  names,  word 
combinations  that  do  not  make  sense,   and  missing 
testimony  or  colloquy  due  to  being  inaudible  to  the 
reporter . 
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APPEARANCES : 

ON  BEHALF  OF  THE  GOVERNMENT: 
MAJOR  ASHDEN  FEIN 
CAPTAIN  JOSEPH  MORROW 

ON  BEHALF  OF  THE  ACCUSED: 
DAVID  COOMBS 
MAJOR  THOMAS  HURLEY 
CAPTAIN  JOSHUA  TOOMAN 
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PROCEEDINGS, 

THE  COURT:     Court  is  called  to  order.  Major 
Fein,   please  account  for  the  parties. 

MR.   FEIN:     Yes,   ma'am.     Your  Honor,  all 
parties  in  the  court  last  recess  are  again  present  with 
the  follow  exceptions :     Captain  Overgaard  and  Captain 
Mitroka  are  absent .     Captain  Morrow  and  Captain  von  Elten 
are  present . 

Also,   ma'am,   as  of  this  morning's  start  of 
the  hearing  there  are  ten  members  of  the  media  at  the 
media  operations  center,   one  stenographer,   there's  one 
member  of  the  media  in  the  courtroom,   and  currently  no 
one  in  the  overflow  trailer,   although  it  is  available. 

THE  COURT :     All  right .     Are  there  any 
housekeeping  matters  we  need  to  address  before  we 
proceed? 

MR.   FEIN:     Yes,   ma'am,   there  is  one. 
Yesterday  at  the  conclusion  of  the  session  prosecution 
exhibit  178  was  being  read  on  to  the  record  and  then  was 
stopped  and  made  publicly  available  both  in  the  courtroom 
and  the  media  operations  center.     As  of  0900  this 
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morning,   prosecution  exhibit.  178,   the  stipulation  of 
expected  testimony  of  Mr.   Murphy  was  published  to  the 
FOIA  reading  room  for  the  public's  access  to  it. 

THE  COURT:     Thank  you. 

Mr .   Coombs . 

MR.   COOMBS:     Nothing  from  the  defense,  Your 

Honor . 

THE  COURT:     All  right.     The  court  is  prepared 
to  rule  on  the  government  motion  to  admit  prosecution 
exhibits  31,    32  and  109  for  identification. 

On  10  June  2013,   after  hearing  testimony  from 
Special  Agent  Mander,   the  court  ordered  parties  to  file 
briefs  on  the  admissibility  of  prosecution  exhibits  31, 
32  and  109  for  identification. 

On  15  June  2013  the  parties  filed  briefs,  the 
government  at  appellate  exhibit  567,   defense  at  appellate 
exhibit  568. 

On  18  June  2013  the  court  heard  oral  argument 

from  counsel. 

On  27  June  2010  the  government  recalled 
Special  Agent  Mander  and  offered  prosecution  exhibits  31 
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Alpha  and  Bravo,   and  prosecution  exhibits  32  Alpha  and 
Bravo  for  identification  into  evidence. 

The  court  has  considered  the  filings  by  the 
parties,   evidence  presented,   the  testimony  of  Special 
Agent  Mander  and  oral  argument  of  counsel .     The  court 
finds  and  rules  as  follows: 

On  10  June  2013  the  government  offered 
prosecution  exhibits  31,    32  and  109  into  evidence  through 
the  testimony  of  Special  Agent  Mander.     On  27  June,  2010 
the  government  offered  prosecution  exhibits  31  Alpha  and 
Bravo  and  prosecution  exhibits  32  Alpha  and  Bravo  into 
evidence  by  the  additional  testimony  of  Special  Agent 
Mander.     The  government  offers  to  authenticate 
prosecution  exhibits  31,    31  Alpha,    31  Bravo,    32,    32  Alpha 
and  32  Bravo  for  identification  in  accordance  with  MRE 
901B1,   testimony  of  a  witness  with  knowledge,  Special 
Agent  Mander,   and  MRE  901B4,   distinctive  characteristics 
and  the  like,   the  appearance,   content,  substance, 
internal  patterns  or  other  distinctive  characteristics  of 
the  item  taken  together  with  all  the  circumstances . 

The  government  offers  to  authenticate 
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prosecution  exhibit.  109  for  identification  as  a 
self-authenticating  business  record  in  accordance  with 
MRE  803.6  and  MER  902.11,   and  in  accordance  with  MRE 
802.1,   testimony  of  a  witness  with  knowledge  through  the 
testimony  of  Special  Agent  Mander  and  the  attestation  of 
Mr.   Christopher  Butler,   office  manager  of  archive  dot 
org. 

Findings  of  fact . 

The  prosecution  exhibits  31,    31A,    31B,  32, 
32A  and  32B  for  identification. 

One .     Prosecution  exhibits  31  and  32  for 
identification  are  screen  captures  from  Google  cache,  a 
website  that  archives  past  versions  of  other  websites . 
In  this  case  prosecution  exhibits  31  and  32  for 
identification  are  Google  archived,   Google  cache  archives 
of  WikiLeaks  Twitter  dot  com  postings .     Special  Agent 
Mander  is  unfamiliar  with  the  process  of  how  Google  cache 
archives  web  postings . 

Two .     WikiLeaks  has  an  account  on  the  Twitter 
website.     Twitter  account  posts  messages  in  chronological 
order  with  the  most  recent  on  the  top.     All  public 
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messages  remain  on  the  site  indefinitely . 

On  or  about  August  2012,   Special  Agent  Mander 
accessed  the  WikiLeaks  account  on  Twitter  through  a 
Google  search.     The  WikiLeaks  account  or,  quote-unquote, 
feed  had  thousands  of  messages  making  searches  for 
particular  tweets  onerous  directly  through  the  WikiLeaks 
feed. 

Special  Agent  Mander  then  looked  for  specific 
WikiLeaks  tweets  by  looking  for  search  terms  on  Google . 
The  search  terms  caused  Google  to  pull  up  the  Twitter 
website  with  the  tweets  31  Alpha  and  prosecution  exhibit 
32  Alpha  for  identification.     Prosecution  exhibits  31 
Alpha  and  prosecution  exhibit  32  Alpha  for  identification 
are  screen  captures  taken  by  Special  Agent  Mander  on  or 
about  August  2012  while  he  was  reviewing  the  WikiLeaks 
tweets  on  the  Twitter  website. 

Special  Agent  Mander  typed  in  the  uniform 
research  locator,   URL  address  of  each  tweet  in  a  text  box 
on  the  tweet  capture.     The  URL  for  PE  31  Alpha  for 
identification  is  H  T  T  P,   colon,    slash,    slash,   WWW  dot 
Twitter  dot  com,    slash,   pound  sign,   exclamation  point, 
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slash,   WikiLeaks,    slash,    status,    slash,    13570878440.  The 
URL  for  PE  32  Alpha  for  identification  is  HTTP,  colon, 
slash,    slash,   WWW  dot  Twitter  dot  com,    slash,  pound 
sign,   exclamation  point,    slash,   WikiLeaks,    slash,  status, 
slash,  7530875613. 

Special  Agent  Mander  personally  viewed  the 
WikiLeaks  Twitter  account  and  the  tweets  on  that  account 
have  the  same  web  address  except  for  a  serial  number 
unique  to  each  tweet . 

Special  Agent  Mander  visited  the  Twitter  page 
for  WikiLeaks  on  or  about  3  June  2013  and  again  on  27 
June  2013.     On  27  June  2013  Special  Agent  Mander  typed  in 
the  URL  of  PE  32  Alpha  in  a  Google  search  and  retrieved 
the  Twitter  website  with  the  website  in  prosecution 
exhibit  32B.     From  the  Twitter  website  Special  Agent 
Mander  then  typed  in  the  URL  for  prosecution  exhibit  31 
Alpha  and  retrieved  the  tweet  in  prosecution  exhibit  31 
Bravo . 

Special  Agent  Mander  took  screenshots  of  both 
tweets.     Prosecution  exhibit  31B  and  prosecution  exhibit 
32B  have  the  same  URL  as  prosecution  exhibits  31A  and  B, 
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and  32A,   except,  that  prosecution  exhibit  31B  and 
prosecution  exhibit  32B  begin  with  the  URL  with  HTTPS 
rather  than  HTTP,   and  they  do  have  not  have  the  slash, 
pound,   exclamation,   slash.     Nevertheless,   a  search  using 
the  URL  for  PE  31  Alpha  and  32  Alpha  for  identification 
in  Google  retrieves  prosecution  exhibits  31  Bravo  and  32 
Bravo  for  identification. 

Also,   on  27  June  2013  Special  Agent  Mander 
went  directly  to  the  WikiLeaks  feed  on  Twitter  to  try  to 
find  the  tweet  in  prosecution  exhibits  31  and  32  for 
identification.     The  feed  would  not  let  him  access  the 
messages  prior  to  March  13.     Special  Agent  Mander  has 
never  reviewed  the  tweets  in  prosecution  exhibits  31  and 
32  for  identification  directly  from  the  WikiLeaks  Twitter 
feed. 

Three.     Prosecution  exhibits  31,    31  Alpha,  31 
Bravo,    32,    32  Alpha  and  32  Bravo  for  identification  have 
the  following  distinctive  characteristics  attributable  to 
WikiLeaks.     The  tweets  feature  the  WikiLeaks  logo,  they 
feature  the  WikiLeaks  name  in  the  account  name,  WikiLeaks 
used  in  Twitter,   used  on  Twitter,   the  serial  numbers  in 
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the  URL,   and  the  URLs  are  the  same  for  prosecution 
exhibits  31,    31  Alpha  and  31  Bravo  for  identification. 
The  serial  numbers  for  prosecution  exhibits  32,    32  Alpha 
and  32  Bravo  are  the  same .     And  the  contents  of  the 
tweets  in  prosecution  exhibit  for  identification  31 
series  of  exhibits  and  the  prosecution  exhibit  32  for 
identification  series  of  exhibits  relates  to  the 
information  allegedly  compromised  by  PFC  Manning. 

Four.     The  date  and  time  of  the  tweets  in 
prosecution  exhibits  31,    31  Alpha  and  31  Bravo  for 
identification  are  the  same  and  are  actually  on  the 
tweets  themselves  and  not  generated  from  Google  cache  or 
any  other  Internet  archive  process . 

Prosecution  exhibits  31,    31  Alpha  and  31 
Bravo  are  screen  images  of  the  same  tweet  with  WikiLeaks 
label,   logo,   text,   time,   date  and  URL  serial  number.  The 
same  is  true  for  the  date  and  time  of  the  tweets  in 
prosecution  exhibits  32,    32  Alpha  and  32  Bravo  for 
identification . 

Prosecution  exhibit  109  for  identification. 

One.     Prosecution  exhibit  109  is  a  screen 
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capture  from  archive  dot  org,   another  website  that 
archives  past  versions  of  websites  across  the  Internet. 
More  specifically,   prosecution  exhibit  109  for 
identification  is  a  web  page  from  archive  dot  org 
purporting  to  show  a  WikiLeaks  dot  com  web  page  available 
on  the  Internet . 

On  5  November  2009  at  0613:30  Special  Agent 
Mander  has  not  reviewed  the  original  WikiLeaks  dot  com 
with  web  page  that  the  archive  dot  org  web  page  purports 
to  have  archived  as  prosecution  exhibit  109  for 
identification.     He  also  has  no  personal  knowledge  of  the 
method  or  standards  employed  by  archive  dot  org  in 
creating  and  maintaining  their  web  page  or  with  methods 
or  standards  used  to  capture  web  pages  by  third-party 
donors  to  archive  dot  org. 

Three.     On  15  June  2013  the  parties  submitted 
briefs  on  the  admissibility  of  prosecution  exhibits  31, 
32  and  109  for  identification.     As  additional  evidence  to 
authenticate  prosecution  exhibit  109  for  identification 
in  accordance  with  military  rule  of  evidence  902.11  and 
military  rule  of  evidence  901B2,   the  government  submitted 
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an  attestation  certificate  from  Mr.   Christopher  Butler, 
office  manager  of  archive  dot  org,   dated  12  June  2013, 
appellate  exhibit  567,   enclosure  one.     That  attestation 
reads  I  swear  or  affirm  that  each  of  the  following  is 
true  regarding  the  attached  records  to  the  best  of  my 
knowledge  and  belief. 

One .     I  am  an  employee  familiar  with  the 
manner  and  process  in  which  these  records  are  created  and 
maintained . 

Two.     To  the  best  that  the  electronic  systems 
involved  can  accurately  record  and  reflect,   such  files 
were  captured  at  or  near  the  time  of  the  date  reflected 
in  the  URL  assigned  to  each  file  by  virtue  of  an 
automated  transfer  of  electronic  data. 

Three .     Such  records  were  captured  by 
Internet  Archive  or  received  from  third-party  donors  in 
the  course  of  regularly  conducted  business  by  the 
Internet  Archive . 

Four .     The  records  are  true  and  accurate 
copies  of  the  original  documents  in  Internet  Archive 1 s 
Wayback  machine  service  at  web  dot  archive  dot  org. 
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The  court  notes  the  attached  record  to  this 
attestation  is  entitled,   draft,   the  most  wanted  WikiLeaks 
of  2009  -  sort  with  the  same  content  and  URL  as 
prosecution  exhibit  910  for  identification. 

Four.     The  defense  also  submitted  an 
attestation  from  Mr.   Butler  dated  13  June  2013,  enclosure 
10  of  the  defense  brief,   appellate  exhibit  568.  The 
attestation  reads  as  follows . 

One.     I  am  the  office  manager  at  the  Internet 
Archive  located  in  San  Francisco,   California.      I  make 
this  declaration  of  my  own  personal  knowledge . 

Two .      Internet  Archive  is  a  website  that 
provides  access  to  a  digital  library  of  Internet  sites 
and  other  cultural  artifacts  in  digital  form.     Like  a 
paper  library,  we  provide  free  access  to  researchers, 
historians,   scholars  and  the  general  public.  The 
Internet  Archive  has  partnered  with  and  received  support 
from  various  institutions  including  the  Library  of 
Congress . 

Three .     The  Internet  Archive  has  created  a 
service  called  the  Wayback  machine  or  a  service  known  as 
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the  Wayback  machine .     The  Wayback  machine  makes  it 
possible  to  surf  more  than  240  billion  pages  stored  in 
the  Internet  Archives  web  archive . 

Visitors  to  the  Wayback  machine  can  search 
archives  by  URL,   i.e.,   a  website  address.     If  archive 
records  for  a  URL  are  available,   the  visitor  will  be 
presented  with  a  list  of  available  dates .     The  visitor 
may  select  one  of  these  dates  and  then  begin  surfing  on 
an  archived  version  of  the  web.     The  links  on  the 
archived  files  when  saved  by  the  Wayback  machine  point  to 
other  archive  files,   whether  the  HTML  pages  or  images. 
If  a  visitor  clicks  on  a  link  on  an  archived  page,  the 
Wayback  machine  will  serve  the  archived  file  with  the 
closest  available  date  to  the  page  upon  which  the  link 
appeared  and  was  clicked. 

Four .     The  archive  data  made  reviewable  and 
browsable  by  the  Wayback  machine  is  compiled  using 
software  programs  known  as  crawlers  which  surf  the  web 
and  automatically  store  copies  of  web  files,  preserving 
these  files  as  they  exist  at  the  point  in  time  of 
capture . 
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Five .     The  Internet  Archive  assigns  a  URL  on 
its  site  to  the  archive  files  in  the  format  HTTP,  colon, 
slash,   slash,   web  dot  archive  dot  org,   slash,  web,  in 
brackets,   year  in  Y  Y  Y  Y,   end  bracket,   brackets,  day, 
month.     Time  code  H  H  colon,   M  M  colon,    S  S,  brackets, 
end  bracket,   slash,  bracket,   archive  URL,   end  bracket. 

Thus,   the  Internet  Archive  URL,   HTTP,  slash, 
colon,   colon,   web  dot  archive  dot  org,   slash,  web,  slash, 
19970126045828,    slash,   HTTP,    colon,    slash,    slash,  WWW 
archive  dot  org,    slash,   would  be  the  URL  for  the  record 
of  the  Internet  Archive  home  page,   HTML  file,  parens, 
HTTP,    colon,   WWW,   colon,    slash,    slash,   WWW  dot 
archive  dot  org,    slash,   end  parens,   archived  on  January 
26,    1997  at  4:58  a.m.   and  28  seconds. 

A  web  browser  may  be  set  such  that  a  printout 
from  it  will  display  on  the  URL  of  the  web  page  in  the 
printout ' s  footer .     The  date  assigned  by  the  Internet 
Archives  supplies  to  the  HTML  file  but  not  to  the  image 
files  linked  therein.     Thus,   images  that  appear  on  a  page 
may  not  have  been  archived  on  the  same  day  as  the  HTML 
file. 
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Likewise,   if  a  website  is  designed  with, 
quote-unquote,    frames,   the  date  assigned  by  the  Internet 
Archive  applies  to  the  frame  set  as  a  whole  and  not  the 
individual  pages  within  each  frame . 

Six.     Regarding  archive  files  stored  in  and 
made  available  via  the  Wayback  machine,    I  further  declare 
that: 

A.  To  the  best  that  the  electronic  systems 
involved  can  accurately  record  and  reflect  such  files 
were  captured  at  or  near  the  time  and  the  date  reflected 
in  the  URL  assigned  to  each  file  by  virtue  of  an 
automatic  transfer  of  electronic  data. 

B.  Such  records  were  captured  by  Internet 
Archive  or  received  from  third— party  donors  in  the  course 
of  regularly  conducted  activity  by  the  Internet  Archive . 

C.  The  Internet  Archive  captures,    stores  and 
receives  from  third-party  donors  web  data  as  a  regular 
practice . 

D.  The  web  archives  for  the  year  2009  and 
the  Wayback  machine  at  web  dot  archive  dot  org  were 
largely  obtained  from  third-party  organizations  which 
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donated  the  archive  data  captured  by  automatic  electronic 
systems  to  the  Internet  Archive . 

I  do  not  affirm  that  these  web  archives  were 
set  forth  by  or  from  information  transmitted  by  people 
with  knowledge  of  the  information  recorded  therein. 

Eight.     This  document  is  the  Internet  Archive 
standard  affidavit.     The  affidavit  Internet  Archive 
normally  provides  to  parties  seeking  to  use  the  Wayback 
machine  records  as  evidence  in  legal  proceedings  with 
additional  language  provided  in  paragraph  6  through  8 . 

Nine .     Attached  hereto  is  exhibit  A  are  true 
and  accurate  copies  of  printouts  of  the  Internet 
Archive's  record  of  the  HTM  files  for  the  URLs  and  the 
dates  specified  in  the  footer  of  the  printout . 

Ten.     I  declare  under  penalty  of  perjury  that 
the  foregoing  is  true  and  correct . 

The  court  notes  that  exhibit  A  contains  a 
document  entitled,   quote,   draft,   the  most  wanted  leaks  of 
2009,   end  quote,   that  is  similar  to  defendant's  exhibit 
Foxtrot  but  not  identical  as  it  contains  additions, 
deletions  and  changes.     The  URL  is  HTTP,    colon,  slash, 
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slash,  web  dot  archive  dot  org,   slash,  web,  slash 
20011042112937,    slash,   HTTP,    colon,    slash,  slash, 
WikiLeaks  dot  org,    slash,   week,    slash,   draft,  colon, 
underscore,  most,   underscore,   wanted,   underscore,  leaks, 
underscore,   of,   underscore,   2009.     Thus  there  are  at 
least  three  versions  of,   quote,   draft,   the  most  wanted 
leaks  of  2009  available  on  the  Internet  today. 

Hearsay  relevance .     The  court  refers  to 
prosecution  exhibits  31,    31  Alpha  and  31  Bravo  for 
identification  together  as  prosecution  exhibit  31  for 
identification,   and  refers  to  prosecution  exhibits  32,  32 
Alpha  and  32  Bravo  for  identification  as  prosecution 
exhibit  32  for  ID  for  purposes  of  hearsay  and  relevance 
findings  of  fact. 

The  prosecution  exhibit  31  and  prosecution 
exhibit  32  series  of  exhibits  are  the  same  two  tweets, 
thus  hearsay  relevance  findings  are  the  same  for  all  of 
the  exhibits  in  the  series . 

One .     The  defense  asserts  that  prosecution 
exhibits  31  and  32  for  identification  and  prosecution 
exhibits  109  for  identification  are  hearsay  and  that: 
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One,   the  statement  of  the  web  page  or  tweet  itself  is 
hearsay;   two,   the  statement  of  the  individual  who 
allegedly  captured  the  site  and  relayed  the  information 
to  archive  dot  org  or  Google  dot  cache  is  hearsay;  and 
three,   the  statement  of  archive  dot  org  or  Google  dot 
cache  is  hearsay. 

Two.     The  government  offers  prosecution 
exhibits  31,    32  and  109  for  identification  not  for  the 
truth  of  the  matter  asserted  within  the  exhibits;  rather, 
they  are  offering  these  exhibits  to  show  the  effect  they 
may  have  had  on  PFC  Manning.     The  government  asserts  if 
the  contents  of  prosecution  exhibits  31,    32,   and  109  for 
identification  could  have  influenced  PFC  Manning,  the 
exhibits  are  relevant . 

The  defense  asserts  the  government  has 
presented  no  evidence  that  PFC  Manning  saw  or  was  aware 
of  prosecution  exhibits  31,    32  or  109  for  identification, 
therefore,   they  are  not  relevant  to  any  fact  of 
consequence . 

Three .     The  government  theory  of  the  case 
with  respect  to  prosecution  exhibit  109  for 
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identification  is  that  PFC  Manning  viewed  the  WikiLeaks 
most  wanted  list  directly  from  the  WikiLeaks  website  as 
depicted  in  prosecution  exhibit  109  for  identification  on 
or  after  5  November  2009,   not  that  PFC  Manning  viewed  the 
list  as  depicted  in  prosecution  exhibit  109  for 
identification  from  the  Internet,    from  the  archive  dot 
org  website. 

Four .     The  government  has  presented  no 
forensic  evidence  that  the  tweets  in  prosecution  exhibits 
31  and  32  for  identification  or  the  most  wanted  list  of 
2009  in  prosecution  exhibit  109  for  identification  were 
downloaded  by  PFC  Manning. 

The  government  has  offered  evidence  that  PFC 
Manning  conducted  searches  for  WikiLeaks  at  open  source 
dot  gov  on  Intelink,   evidence  of  chats  between  PFC 
Manning  and  Julian  Assange  that  discussed  open  source  dot 
gov,   and  evidence  that  when  conducting  searches  on 
Intelink  when  a  searcher  pulls  up  a  link  on  another 
website,    Intelink  no  longer  captures  the  search  data. 

The  law .     One .     Evidence  must  be  relevant  to 
be  admissible  under  MRE  402. 
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Evidence  is  relevant  if  it  has  a  tendency  to 
make  a  fact  more  probable  or  less  probable  than  it  would 
be  without  the  evidence.     MRE  401. 

Three.     Hearsay  is  a  statement  other  than  one 
made  by  the  declarant  while  testifying  at  the  trial  or 
hearing  offered  in  evidence  to  prove  the  truth  of  the 
matter  asserted.     MRE  801C. 

Four .     Hearsay  evidence  is  inadmissible 
unless  an  exception  applies  or  the  evidence  is  offered 
for  a  purpose  other  than  to  prove  the  truth  of  the  matter 
asserted.     MRE  802.     This  rule  applies  to  testimony  given 
by  witnesses  at  trial  and  to  exhibits,   to  the  extent  that 
the  exhibit  contain  statements. 

Five.     Statements  offered  to  prove  the 
effects  those  statements  may  have  had  on  the  listener  or 
reader  are  not  offered  to  prove  the  truth  of  the  matter 
asserted,   and  therefore  may  be  considered  for  that 
limited  non-hearsay  purpose . 

Six.     Exhibits  require  authentication  as  in  a 
condition  precedent  to  their  admission.     The  requirement 
of  authentication  is  established  by  evidence  sufficient 


Provided  by  Freedom  of  the  Press  Foundation 


1 

2 
3 
4 
5 
6 
7 
8 
9 
10 
11 
12 
13 
14 
15 
16 
17 
18 
19 
20 
21 


UNOFFICIAL  DRAFT  -  6/28/13  Morning  Session 


24 

to  support  a  finding  that  the  exhibit  in  question  is  what 
the  proponent  claims.     MRE  90 1A.     U.S.   versus  Lubich,  72 
MJ  170,   Court  of  Appeals  for  the  Armed  Forces,  2012. 

Seven.     Authentication  is  an  issue  of 
conditional  relevance.     Military  Rule  of  Evidence  104B 
and  MRE  1008  govern  the  inquiry  under  MRE  901.     Thus,  the 
court  may  consider  only  evidence  offered  by  the  proponent 
that  is  admissible  at  trial  to  make  a  preliminary 
determination  whether  the  exhibits  are  sufficiently 
authenticated  for  the  fact  finder  to  make  a  determination 
that  they  are  authenticated.     Lubich,   parens,   quote,  MRE 
901  is  the  same  as  Federal  Rule  of  Evidence  901  and 
embraces  the  well-established  view  that  authentication  is 
a  component  of  relevancy,   unquote.     And  citing  United 
States  versus  Blanchard,    48  MJ  306  at  309,   Court  of 
Appeals  for  the  Armed  Forces,    1998.     Quote,  federal 
courts  of  appeal  decisions  applying  these  principles 
would  be  most  helpful ,   end  quote . 

Federal  Rule  of  Evidence  901,  advisory 
committee  note,   quote,   the  requirement  of  showing 
authenticity  or  identity  falls  in  the  category  of 
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relevancy  dependent  upon  fulfillment  of  a  condition  of 
fact  and  set  forth  by  the  procedures  in  rule,   end  quote. 
Thus,   only  admissible  exhibits  may  be  considered  by  the 
court  in  making  its  preliminary  determination. 

Eight.     Two  methods  of  satisfying  the 
authentication  requirement  and  the  methods  attempted  by 
the  government  in  moving  for  admission  of  prosecution 
exhibits  31,    31  Alpha,    32,    31  Bravo,    32,    32  Alpha  and  32 
Bravo  for  identification  are:     One,   through  a  witness 
with  knowledge  that  the  exhibits  are  what  it  is  claimed 
to  be  or  that  the  exhibit  is  what  it  is  claimed  to  be, 
MRE  901B1;   and,   two,   evidence  of  distinctive 
characteristics  and  the  like,   MRE  901B4. 

Nine .     There  are  no  military  cases  directly 
addressing  the  authentication  requirements  of  online  web 
page  archives,   however,   there  are  federal  and  state  cases 
that  have  addressed  authentication  of  online  web  page 
archives . 

A.     Self —authenticated  business  record,  MRE 
902.11,   MRE  803.6.     The  government  has  provided  no 
authority  where  a  court  addressing  a  challenge  to 


Provided  by  Freedom  of  the  Press  Foundation 


1 

2 
3 
4 
5 
6 
7 
8 
9 
10 
11 
12 
13 
14 
15 
16 
17 
18 
19 
20 
21 


UNOFFICIAL  DRAFT  -  6/28/13  Morning  Session 


26 


authentication  has  ruled  that  online  web  page  archives 
from  a  non-government  source  are  self -authenticating 
business  records.     The  authority  is  to  the  contrary,  in 
re:  Home  Store  Dot  Com,   Inc.  versus  Securities 
Litigation,    340  F.Supp.   2d  769,   Central  District  of 
California,   2004.     Printouts  from  website  do  not  bear  the 
indicia  of  reliability  demanded  for  other 
self-authenticating  documents  under  Federal  Rule  of 
Evidence  902. 

B.     Testimony  by  a  witness  with  knowledge. 
Several  federal  courts  have  addressed  challenges  to 
authentication  of  archived  websites  by  a  witness  with 
knowledge  under  Federal  Rule  of  Evidence  901B1.  Courts 
addressing  the  issue  squarely  have  agreed  that  the 
admission  of  such  web  pages  must  be  predicated  either 
upon  the  testimony  of  an  employee  of  the  archiving 
company  or  upon  testimony  of  someone  having  personal 
knowledge  of  the  contents  of  the  archived  web  pages  such 
that  the  witness  can  testify  that  the  archive  copy  is 
accurate . 

The  only  criminal  case  relied  upon  by  the 
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government  as  authority  to  authenticate  archived  web 
pages  in  accordance  with  Federal  Rule  of  Evidence  are, 
or,   excuse  me,    901A1,    is  United  States  versus  Bansal,  663 
F . 3d  634,   Third  Circuit,    2011.      In  Bansal  the  government 
called  the  witness  to  testify  about  how  the  Wayback 
machine  works  and  how  reliable  its  contents  are .  The 
witness  also  compared  the  screenshots  with  previously 
authenticated  and  admitted  images  from  the  website  at 
issue  and  opined,   based  on  her  personal  knowledge,  that 
they  were  authentic.     The  opinions  did  not  identify  who 
the  witness  was . 

The  other  two  cases  relied  upon  by  the 
government  for  an  attestation  FOIA  witness  with  knowledge 
to  in  accordance  with  Federal  Rule  of  Evidence  901  are 
civil  cases  where  confrontation  is  not  at  issue.  St. 
Luke's  Cataract  and  Laser  Institute,   PA  versus  Sanderson, 
2006,   Middle  District  of  Florida,   2006,   and  Telewysa 
Polska  USA,    Inc.   versus  Echostar  Satellite  Corp.,  2004 
Westlaw  2367740,   Northern  District  of  Illinois,  2004. 

Other  courts  addressing  the  issue  include 
Sam's  Riverside,    Inc.   versus  Intercon,    7  90  F.Supp.  2d 
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965,    Southern  District  of  Iowa,    2011,   holding  that  an 
archive  dot  org  employee  can  authenticate  archive  dot  org 
web  pages . 

United  States  versus  Schrumm,   2011  West law 
1753488  at  1-3,   Eastern  District  of  Arkansas,  2011, 
district  court  initially  admitted  archive  dot  org  web 
page  sponsored  by  a  law  enforcement  witness  but 
reconsidered  it  and  excluded  it.     Issue  was  whether  the 
curative  instruction  to  the  jury  was  sufficient. 

Netscape  Communications  Corp.  versus  Value 
Click,    Inc.,    707  F.Supp.   2d  640  at  644,   at  footnote  six, 
Eastern  District  of  Virginia,    2010.     District  court 
admitted  archive  dot  org  website  because  sponsoring 
witness  had  seen  original  and  could  testify  that  the 
archive  dot  org  page  was  an  exact  copy. 

Specht  versus  Google,    Inc.,    592  F.Supp.  2d 
246  at  278,   Northern  District  of  New  York,  2008. 
Defendants  correctly  point  out  that  the  Adams  declaration 
cannot  authenticate  the  search  results  from  WWW  archive 
dot  org  because  such  evidence  may  only  be  authenticated 
by  a  knowledgeable  employee  of  the  website. 
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C.     The  only  case  presented  to  the  court  by 
the  parties  that  directly  addresses  authentication  in 
accordance  with  Federal  Rule  of  Evidence  901A1  were  where 
a  third-party  has  donated  an  archived  web  page  to  an 
archive  dot  org  is  a  civil  case.     Novak  versus  Tucows, 
Inc.,    2007  Westlaw  922306.     The  information  at  issue  was 
only  as  reliable  as  the  third-party  donor  made  it . 

Ten.  The  court  considers  issues  of  hearsay 
and  whether  evidence  should  be  excluded  under  MRE  403  as 
preliminary  questions  in  accordance  with  MRE  104A. 

Conclusions  of  law .     Authentication .     One . 
The  court  will  consider  only  admissible  evidence  offered 
by  the  proponent  that  will  go  before  the  fact  finder  in 
making  a  preliminary  determination  regarding 
authentication . 

Two.     Prosecution  exhibits  31,    31  Alpha,  31 
Bravo,    32,    32  Alpha  and  32  Bravo  for  identification  have 
been  properly  authenticated  in  accordance  with  MRE  901B1 
by  the  testimony  of  Special  Agent  Mander .  Although 
prosecution  exhibits  31  and  32  for  identification  are 
retrieved  from  Google  dot  cache,   Special  Agent  Mander 
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testified  he  retained  copies  of  the  tweets  directly  from 
Twitter  dot  com  at  31  Alpha  and  Bravo  and  32  Alpha  and 
Bravo.     These  exhibits  are  also  properly  authenticated  in 
901,   distinctive  characteristics  as  set  forth  in  the 
court's  findings  of  facts.     31,    31  Alpha,    31  Bravo,  32, 
32  Alpha  and  32  Bravo  for  identification  are  properly 
authenticated . 

Three.     Prosecution  exhibit  109  for 
identification  is  not  sufficiently  reliable  to  be  a 
self-authenticating  business  record  in  accordance  with 
MRE  902.11  and  MRE  803.6.     For  authentication  in 
accordance  with  MRE  902  or,    sorry,    901,    federal  case  law 
on  authentication  issue  is  persuasive.     A  witness 
sponsoring  the  admission  of  archived  web  pages  must 
either  have  knowledge  of  the  archiving  procedure  used  by 
the  archiving  entity  and  or  third-party  donor  entity, 
such  that  the  witness  can  testify  that  the  archive 
actually  shows  true  copies  of  the  website  they  purport  to 
archive  or  must  have  knowledge  of  the  original  web  page 
such  that  the  witness  can  verify  the  archive  copy  is  a 
true  copy  of  the  original . 
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The  government  has  advised  the  court  it  does 
not  intend  to  admit  the  attestation  by  Mr.  Butler, 
enclosure  one  of  the  government's  brief.  Accordingly, 
the  court  finds  the  government  has  not  properly 
authenticated  prosecution  exhibit  109  for  identification 
and  it  is  not  admitted. 

Four.     PE  31  series  of  exhibits  provides 
evidence  that  WikiLeaks  or  an  entity  purporting  to  the 
WikiLeaks  posted  a  tweet  on  May  2010  requesting  a  list  of 
as  many  dot  mil  email  addresses  as  possible.     The  PE  31 
series  of  exhibits  is  offered  by  the  government  for 
non-hearsay  purposes.     Prosecution  exhibit  31  series  of 
exhibits  is  offered  as  circumstantial  evidence  to  show 
that  PFC  Manning 1 s  intent  to  respond  to  WikiLeaks 
queries.     Government  witness  Williamson  testified  that 
the  accused  downloaded  the  U.S.    forces  Iraq  Microsoft 
Outlook  Sharepoint  Exchange  Server  Global  Address  List, 
GAL,   between  11  through  27  May  2010.     This  evidence  is 
relevant  to  specification  two,   charge  one,   aiding  the 
enemy . 

Five.     The  8  January  2010  tweet  in  the 
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prosecution  series  of  exhibits  state,   quote,  have 
encrypted  videos  of  U.S.   bomb  strikes  on  civilians,  HTTP, 
colon,    slash,   bit,   period,   L  Y,    slash,   W  L  Afghan  2.  We 
need  super  computer  time,   HTTP,    colon,    slash  L  J  F  F, 
slash,   end  quote. 

The  portion  of  the  tweet  stating,   quote,  have 
encrypted  video  of  the  U.S.  bomb  strikes  on  video  is  a 
statement.     The  government  offers  the  tweet,   one,   as  a 
hearsay  exception  under  MRE  803.3,   then  existing  state  of 
mind  to  demonstrate  WikiLeaks  publicized  plan  to 
compromise  military  information  as  of  8  January  2010; 
two,    for  the  non-hearsay  purpose  to  show  that  PFC 
Manning's  awareness  of  WikiLeaks  open  and  publicly 
disclosed  plan  to  expose  classified  evidence. 

Three .     For  the  purpose  to  uncrypt  the  video 
for  circumstantial  evidence  to  connect  the  timing  of  the 
to   (INAUDIBLE)   on  Mr.   Jason  Katz ' s  computer  on  15 
December  2009  with  the  same  hash  values  as  the  Afghan 
video  in  the  CENTCOM  server  allegedly  communicated  server 
—  with  the  video  allegedly  communicated  to  WikiLeaks  by 
PFC  Manning. 
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And,    four,   as  a  hearsay  exception  under  MRE 
803.3  to  corroborate  PFC  Manning's  admissions  that  he 
sent,    sorry,   he  sent  WikiLeaks  an  encrypted  video  in  the 
Internet  chats. 

For  the  reasons  proffered  by  the  government 
above,  prosecution  exhibit  32  is  relevant  as  evidence  of 
PFC  Manning's  knowledge  of  the  scope  of  WikiLeaks ' s 
intended  disclosure  for  the  specification  of  charge  one, 
aids  the  enemy,    specification  one  of  charge  two,  wantonly 
causing  to  publish  and  to  prove  willful  of  the  Gharani 
video,   specification  one  of  charge  two. 

Six.     Prosecution  exhibit  109  for 
identification  is  a  request  for  information  and  is 
offered  for  the  fact  that  the  request  was  made,   not  for 
the  truth  of  the  matter  asserted.     The  government  offers 
prosecution  exhibit  109  for  identification  for 
non-hearsay  purpose  as  circumstantial  evidence  that  PFC 
Manning  was  aware  of  prosecution  exhibit  109  for 
identification  and  his  intent  to  gather  information  and 
send  it  to  WikiLeaks . 

Although  the  government  has  not  presented 
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evidence  that  the  accused  actually  accessed  prosecution 
exhibit  109  for  identification,   the  government  has 
presented  evidence  that  PFC  Manning  searched  Intelink  for 
WikiLeaks  and  for  some  information  on  prosecution  exhibit 
109  for  identification.     The  government  also  presented 
evidence  that  when  a  person  does  an  Intelink  search  and 
navigates  to  another  website  to  continue  the  search, 
Intelink  no  longer  captures  the  metadata. 

The  court  finds  the  timing  of  prosecution 
exhibit  109  for  identification  posting  in  conjunction 
with  other  evidence  presented  by  the  government  is 
relevant  circumstantial  evidence  offered  for  a 
non-hearsay  purpose  to  further  the  inference  that  PFC 
Manning  was  aware  of  the  information  requested  by 
WikiLeaks  and  prosecution  exhibit  109  for  identification. 
Should  prosecution  exhibit  109  for  identification  be 
properly  authenticated,   it  is  relevant  to  the  charges  for 
the  specifications  in  charges  one  and  two. 

Seven .     The  court  has  considered  whether  the 
probative  value  of  prosecution  exhibits  31  and  32  for 
identification  series  of  exhibits  is  substantially 
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outweighed  by  the  danger  of  unfair  prejudice  under  the 
criteria  of  MRE  403  and  finds  it  is  not.     The  court  as  a 
fact  finder  will  consider  the  evidence  for  proper 
admissible  purposes. 

Ruling . 

The  government  motion  to  admit  prosecution 
exhibits  31,    31  Alpha,    31  Bravo,    32,    32  Alpha  and  32 
Bravo  for  identification  is  granted.     The  government 
motion  to  admit  prosecution  exhibit  109  for 
identification  is  denied. 

So  ordered  this  27th  day  of  June,  2013. 

We ' 11  have  that  marked  as  the  next  appellate 
exhibit  in  line . 

Is  there  anything  else  we  need  to  address 
before  we  continue? 

MR.   FEIN:     No,  ma'am. 

MR .   COOMBS :     No ,   Your  Honor . 

THE  COURT:     All  right.      Is  the  government 
ready  to  proceed? 

MR.   Von  ELTEN:     Yes,   ma'am.     United  States 
recalls  Chief  Warrant  Officer  4  Ronald  Nixon. 
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Whereupon : 

RONALD  NIXON, 
recalled  as  a  witness,   having  been  previously  duly 
sworn  according  to  law,   testified  as  follows : 

MR.   von  ELTEN:     Please  have  a  seat,  Mr. 
Nixon.     Let  me  remind  you  you're  still  under  oath. 

Good  morning. 

THE  WITNESS :     Good  morning . 
DIRECT  EXAMINATION 

BY  MR.   von  ELTEN: 

Q.  Chief  Nixon,   how  long  in  your  career  have  you 

been  involved  with  purchasing  software? 

A.  About  the  time  I  was  an  E5,    so  sometime  in 

'96,    '97  on. 

Q.  And  for  how  long  have  you  continued  to  be 

involved  with  the  purchase  of  software? 

A.  From  that  period  on  until  now. 

Q.  When  did  you  become  a  warrant  officer? 

A.  2001. 

Q.  What  experience  purchasing  software  did  you 

have  in  the  years  leading  up  to  immediately  after 
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becoming  a  warrant  officer? 

A.  In  the  years  leading  up  to  it  I  was  assigned 

to  a  unit  known  as  a  JCSC  at  MacDill  Air  Force  Base . 
Because  of  the  unique  requirements  that  our  customer  base 
put  on  us,   there  would  be  times  when  my  team  would  have 
to  do  purchasing  of  equipment  or  software  and  that  was  so 
it  would  come  to  us  with  the  requirement,   we  would  go 
look  at  the  requirement,   you  know,   look  for  technology  as 
applicable  to  that,  put  the  bids  together,  put  the 
packages  together,  make  sure  it  goes  out  to  three 
different  vendors  for  bid,   and  then  when  it  came  back  to 
the  J8  section  we  would  review  that  with  the  J8  to  make 
sure  they  met  the  budgetary  requirement  for  what  our 
customer  put  on  us  and  also  make  sure  they  met  the 
technical  requirements  for  what  we  were  looking  for. 

Q.  What  types  of  software  are  you  purchasing? 

A.  All  kind  of  different  software  from  network 

management  software,   communications  interface  software, 
of  course  services  software  that  supported  your 
day-to-day  services,   things  for  voice  over  IP, 
everything . 


Provided  by  Freedom  of  the  Press  Foundation 


1 

2 
3 
4 
5 
6 
7 
8 
9 
10 
11 
12 
13 
14 
15 
16 
17 
18 
19 
20 
21 


UNOFFICIAL  DRAFT  -  6/28/13  Morning  Session 


38 

Q.  How  many  contracts  did  you  review  during  that 

time  period? 

A.  Dozens. 

Q.  How  much  of  those  accounts,   of  each  contract 

did  you  review? 

A.  For  those  contracts  for  the  team  level  support 

stuff  it  was  cradle  to  grave,  everything. 

Q.  How  much  of  the  contract  did  you  read? 

A.  All  of  it. 

Q.  Did  you  look  at  the  prices? 

A.  Yes.     Well,   we  were  required  at  times  to  have 

to  cross  reference  that  because  you  would  have  a  cost 
associated  with  it,  but  suppose  it  went  out  for  bid  and 
came  back  and  it  either  didn ' t  quite  meet  the  technical 
requirements  or  it  didn't  meet  the  budgetary 
requirements,    so  then  you've  got  to  do  that  take  and 
give,   you  know,   you've  got  to  balance  it  out  to  make  sure 
you're  getting  the  best  bang  for  your  buck. 

Q.  Chief  Nixon,   you  just  mentioned  technical 

review  as  part  of  the  process.     What  is  that? 

A.  Military  is  driven  on  requirements,    so  the 
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requirement  comes  to  you,   you  make  sure  that,   so  you  make 
sure  that  the  requirement  is  met  to  the  technical 
specifications  of  the  contract.     To  put  it  very  simply, 
you  know,    if  you're  ordering  a  Ford  Mustang,   you  order  a 
GT,   you  want  to  make  sure  that  you  get  a  GT,   not  the  base 
model.     Maybe  it  doesn't  quite  meet  the  requirements, 
maybe  you  want  to  be  able  to  go  faster. 

We  do  the  same  thing  when  it  comes  to 
software  and  hardware,  we  do  the  exact  same  thing, 
because  for  instance,   if  you're  looking  at  Exchange, 
there  are  lots  of  different  versions  of  Exchange,   and  if 
I'm  building  a  network  to  support  50  guys,    I  can  skimp  on 
a  lot  of  things  and  I  don ' t  need  to  buy  a  robust  software 
package.     But  if  I'm  supporting  160,000  people,    I  need  to 
go  all  out  and  I  need  to  buy  all  those  options  and  things 
that  come  with  it.     So  I  have  to  make  sure  I'm  finding 
the  happy  medium. 

Q .  Let ' s  talk  about  your  involvement  in  the  large 

scale  shelter  program.     When  were  you  involved  with  that 
program? 

A.  The  large  scale  shelter  program  was  the  three 
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core  services  initiative.     From  2008  when  I  first  got  the 
three  core  until  I  left  in  2012,   that  project  ran  the 
entire  time  while  we  were  there .     What  it  was  is  when  the 
Army  fielded  the  BCICS  service  suites  for  the  Army  as  a 
whole,   the  cores  kind  of  got  neglected.     So  each  of  the 
cores,   18  first  and  three  cores  basically  had  to  come  up 
with  their  own  services  programs  to  be  table  to  support 
Exchange,    file  sharing  and  all  those  things  out  in  the 
tactical  environment,   so  that's  what  we  built.     We  built 
a  mobile  services  shelter  to  include  one  that  we  took 
with  us  to  Iraq.     So  the  entire  time  I  was  there  that 
project  ran  the  entire  gamut. 

Q.  What  was  your  role  in  the  contractual  process 

for  that  program? 

A.  For  that  program  in  particular,   what  we  did  is 

I  make  sure  that  I  was  embedded  in  making  sure  that  the 
technical  requirements  were  met  for  as  things  came  in  and 
went  out .     When  I  first  started  there  I  was  actually  the 
corps  engineer,   so  the  backbone  of  that  network  was 
designed  by  myself  and  the  people  on  my  team.     And  then 
as  I  moved  over  to  the  plans  and  operations  shop,  it 
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became  more  of  an  oversight,   technical  oversight  and  a 
budgeting  oversight  to  make  sure  we  were  meeting  all  of 
our  requirements  that  we  specified  earlier. 

Q.  How  many  contracts  did  you  review  as  part  of 

that  program? 

A.  For  that  contract  there  were  three  or  four 

subcontracts  that  ran  with  Billy  Asbell  and  Worldwide 
Technologies  to  help  us  put  that  package  together  and 
lots  of  small  subcontracts,  but  three  or  four  major 
contracts  that  interacted  with  the  entire  shelter  as  a 
whole . 

Q.  How  much  of  those  contracts  did  you  read? 

A.  All  of  them. 

Q.  Did  you  see  the  prices? 

A.  Yes,  sir. 

Q.  What  was  the  hardware  involved  in  that 

project? 

A.  So  the  hardware  for  that  project,  routers, 

switches,   backbone  equipment,   you  got  to  be  able  to  make 
sure  that  the  data  can  get  from  one  place  to  the  other, 
the  servers,   the  fiber  channel  switches  to  go  to  the 
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backbone  of  that  rack,   actual  rack  space,  air 
conditioning,   the  actual  hardware  for  the  shelter  itself, 
the  cabling,   all  of  that. 

Q.  What  software  was  involved  in  that  contract? 

MR.   HURLEY:     Objection,   ma'am.  Relevance. 

THE  COURT:     All  right.     What  is  the 

relevance? 

MR.   von  ELTEN:     Ma'am,   this  is  similar 
equipment  that  was  used  in  the  go .     Personal  knowledge 
for  pricing. 

THE  COURT:     All  right.  Overruled. 

THE  WITNESS:     Repeat  the  question,  sir. 
BY  MR.   von  ELTEN: 

Q.  What  software  was  involved  in  the,  those 

contracts? 

A.  So  for  those  contracts,   of  course,   you  had 

your  normal  management  interface  software,  but  we  also 
had  to  buy  all  of  the  services  software,   so  for  all  of 
the  servers  that  we  supported,  we  had  to  buy,   you  know, 
server  2008  for  those,  we  had  to  buy  the  Exchange 
software,   and  then  all  of  the  management  software,  the 


Provided  by  Freedom  of  the  Press  Foundation 


1 

2 
3 
4 
5 
6 
7 
8 
9 
10 
11 
12 
13 
14 
15 
16 
17 
18 
19 
20 
21 


UNOFFICIAL  DRAFT  -  6/28/13  Morning  Session 

43 

management,  conceals,   network  management,   even  our  normal 
user  stuff  like  Vista  for  the  machines  and  XP  for  the 
machines  and  even  Office. 

Q.  Chief  Nixon,    let's  talk  a  little  bit  about 

your  involvement  with  GAL  infrastructure  again.     What  was 
your  role  with  contracts  in  GAL  infrastructure? 

A.  For  three  core  or  for  Iraq,  sir? 

Q.  For  Iraq. 

A.  For  Iraq,   technical  oversight  for  those 

contracts,    so  making  sure  that  the  technical  requirements 
were  met  by  the  contract.     And  then,   yeah,   that  was  my 
primary  position  for  that,  sir. 

Q.  What  technical  requirements  did  you  consider 

as  part  of  those  contracts? 

A.  So  within  those  technical  requirements,  since 

we're  talking  about  software,  so  for  Microsoft  Exchange, 
so  what  I  would  do  is  I'd  weigh  making  sure  looking  at 
what  my  customer  base  was,  my  customer  base  for  Iraq  was 
160,000  to  200,000,  that  was  the  area  that  I  had  to  work 
within  based  on  surge,  contracted  personnel,  things  like 
that.     So  if  I  look  at,   if  I  look  at  that  requirement, 
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okay,    I've  got  to  buy  Exchange,    I've  got  to  buy  so  many 
instances  of  Exchange  to  filter  through  the  network,  I've 
got  enterprise  level  servers  at  USFI,   but  then  I've  got 
local  instances  of  those  servers  as  they  push  further 
down  into  the  network . 

And  then  you  have  to  buy  what ' s  known  as  a 
CAL,   which  is  a  client  access  license.     Okay.  Client 
access  licenses  are  where  companies  like  Microsoft  make 
their  money.     It  used  to  be  where  they  just  sold  you 
software  at  a  ridiculous  price  and  that's  what  you  paid. 
What  they've  done  is  gone  to  a  client  access  structure  so 
what  you  do  is  drive  the  cost  of  the  base  software  really 
low,   but  then  you're  forced  to  basically  pay  for  each 
machine  and  each  user  on  your  network . 

So  for  Exchange,    I  had  to  buy  CALs  based  on 
how  many  databases  I  wanted  to  be  able  to  talk  to.  For 
Active  Directory  I  had  to  buy  CALs,   or  not  I,   but  USFI 
had  to  purchase  CALs  based  on  each  user  and  machine  in 
the  greater  Iraq  dot  domain. 

Q.  How  many  contracts  did  you  review  for  the  Iraq 

GAL? 
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A.  So  for  the  services  that  would  be  tied  or  used 

for  GAL,   we  did  some  server  upgrades  while  I  was  there  to 
Server  2008,   and  we  also  did  some  hot  line  purchases  for 
CALs  that  or  for  units  that  weren't  able  to  support 
themselves.     And  then  you  had  the,   so  then  you  had  the  — 
I'm  trying  to  run  through  it  real  quick.     Sorry.     That  is 
all  of  them. 

Q.  About  how  many? 

A.  There  were  three  or  four  major  contracts  that 

ran  through  that,  sir. 

Q.  How  much  of  those  contracts  did  you  read? 

A.  I  read  most  of  the  technical  and  the  pricing 

pieces  for  them  because  we  had  to  bounce  that  back  off  of 
J8  for  budgeting. 

Q.  Let's  talk  a  little  bit  about  hardware.  What 

hardware  was  part  of  those  contracts? 

A.  So  for  contracting  for  hardware  piece,   we  did 

a  network  upgrade  in  Iraq  to  a  MPLS  backbone,  cost  about 
1 . 2  million  dollars  to  support  the  infrastructure  there . 
You  also  had  various  server  moves  and  a  few  other  moves . 
So  for  hardware,   that's  a  day-to-day  almost  regular 
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occurring  cost  for  an  organization  as  big  as  USFI . 

Q.  What  types  of  hardware  were  included? 

A.  So  routers,    switches,   backbone  infrastructure 

by  the  fiber  network  channels,   servers,   cabling,  again 
some  thing  like  you  run  into  the  SLLS,   air  conditioning, 
all  of  those  kind  of  things  kind  of  tie  in  to  support  a 
network . 

Q.  You  just  mentioned  cabling.     How  much  cabling 

did  the  GAL  require? 

A.  The  GAL  itself  you  would,   if  you  would  look  at 

the  cabling  infrastructure  within  USFI  headquarters  or 
even  locally,   it's  a  fairly  large  infrastructure  of 
cabling  that  requires  to  interconnect  64  physical 
switches  along  with  all  of  the  other  infrastructures  that 
takes  into  play,  sir. 

Q.  How  much  does  the  cabling  cost? 

MR.   HURLEY:     Objection,   ma'am.  Hearsay. 
MR.   von  ELTEN:     Your  Honor,   the  witness  has 
testified  that  he  has  knowledge  based  on  the  contracts 
and  the  contracts  are  not  hearsay. 

THE  COURT :      I  agree .     That ' s  fine .  Personal 
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knowledge .     Overruled . 

THE  WITNESS:     So  costs  for  the  cabling 
itself,   you're  really  looking  at  physical  infrastructure 
that  we  had  in  place .     Backbone  switches  are  in  the  area 
of  about  a  hundred  dollars  apiece.     The  servers 
themselves  which  are,   be  nice  and  conservative,  about 
10,000  dollars  apiece.     And  then  if  you  would  actually 
look  at,   we  ran  miles  of  cable  between  all  of  that 
infrastructure,   so  it's  about  56  dollars  for  a  thousand 
feet  of  CAT  5. 

Q .  What  would  the  GAL ' s  functionality  have  been 

without  cabling? 

A.  You  don't  have  physical  infrastructure,  it 

doesn ' t  work . 

Q.  What  storage,   what  hardware  for  storage  was 

contemplated  under  these  contracts? 

A.  Well,   you  have  to  have  an  area  for,   you  have 

to  have  somewhere  to  store  your  stuff,    just  like  in  a 
house  you've  got  closets,   well,   for  a  network  we've  got 
to  have  somewhere  to  do  that .     So  our  equivalent  to 
throwing  everything  in  the  garage  is  a  SAN,   a  storage 
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area  network.     So  you  have  a  storage  area  network  plus 
you  have  the  internal  storage  an  each  one  of  the  servers 
which  in  a  virtual  environment  is  a  — 

Q.  How  many  SANs  did  the  GAL  require? 

A.  For  the  services  piece  of  the  network  that  we 

designed  there  in  Iraq,   we  had  two  SANs,   one  at  the 
backup  site  and  the  primary  inside  the  actual 
infrastructure  itself. 

Q.  How  much  does  a  SAN  cost? 

A.  About  1.2  million  dollars. 

Q.  What  functionality  does  a  SAN  provide? 

A.  SAN,   like  I  said  before,   it  gives  you  a  place 

to  store  everything  at  once .  I'm  running  the  network  the 
size  that  we  ran  in  Iraq  is  really  one  of  the  more 
complex  undertakings  we've  gone  as  a  military.  So  you 
have  to  have  somewhere  to  be  able  to  store  all  of  that 
and  it  has  to  be  accessible  in  a  rapid  fashion,  so  you 
can't  shortchange  on  that  and  just  daisy  chain  a  whole 
bunch  of  hard  drives  together . 

Q.  What  was  the  functionality  of  the  GAL  without 

the  SAN? 
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A.  It  wouldn't  work.      It  would,   you  would  reach  a 

point  of  saturation  within  the  virtual  environment  and 
the  servers  would  crash. 

Q .  You  mentioned  switches  a  moment  ago .     How  many 

Nexus  backbone  switches  did  the  GAL  require? 

A.  We  had  two  for  each  primary  site,    so  the  one 

in  the  JCSC  itself  and  one  in  the  palace. 

Q.  How  much  does  each  of  those  cost? 

A.  Those  were  right  around  a  hundred  thousand 

dollars . 

Q.  What  functionality  did  they  provide  for  the 

GAL? 

A.  They  provide  rapid  access  to  the  actual 

physical  infrastructure  of  the  servers  and  to  the  SAN 
itself,   so  they  would  allow  for  rapid  communications 
across  all  of  those  platforms. 

THE  COURT:     What  function  were  we  talking 

about  there? 

MR.   von  ELTEN:     The  nexus  backbone  switch, 

ma  'am. 

THE  COURT:     Thank  you. 
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BY  MR.   von  ELTEN : 

Q .  What  would  the  GAL ' s  functionality  have  been 

without  the  nexus  switch  back? 

A.  Again,   it  kind  of  ties  into  the  physical 

infrastructure  piece.     If  you  don't  have  it,   it  doesn't 
go  anywhere . 

Q.  Chief  Nixon,   you  also  mentioned  servers.  How 

many  servers  were  required  for  the  GAL? 

A.  We  had  64  servers  to  support  SIPR  and  NIPR, 

and  we  had  somewhere  around  half  for  the  palace .  So 
about  64  for  the  actual  primary  itself. 

Q.  I  believe  you  gave  the  answer.     Just  for 

clarification,   how  much  does  each  server  cost? 

A.  About  $10,000  apiece.     That's  a  pretty 

conservative  estimate .     We  ran  some  high-end  servers  over 
there  in  Iraq. 

Q .  Let ' s  talk  about  software  now .     What  software 

was  covered  in  these  contracts? 

A.  All  different  types  of  software  from,  again, 

you  talk  about  network  management  software,  you  talk 
about  management  console  software,   and  then  the  ones 
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we ' re  primarily  concerned  with  would  be  the  Active 
Directory  for  the  main  controller,   of  course  Exchange, 
and  then  the  server  platforms  they  sit  on.     I  can  buy 
Exchange,   but  I  still  have  to  have  a  server  platform  for 
it  to  sit  on. 

Q.  A  few  moments  ago  you  talked  about  CALs  and  a 

few  other  things .     Let ' s  talk  about  how  software  is 
contracted  in  terms  of  pricing.     How  generally  does  the 
military  pay  for  software? 

A.  Okay.     So  generally  paid  for  depends  on  what 

we're  looking  at.     So  if  we  had  a,    so  if  we  had  an  Army 
unit  within  somewhere  in  Iraq  that  needed  something,  they 
would  put  a  requirement ' s  request .     A  requirements  would 
come  to  USFI .      If  it ' s  not  something  that  we  can  find  or 
if  it ' s  considered  a  program  of  record,   which  means  it 
should  be  taken  care  of  by  ASOL  who  does  acquisitions  for 
POR  systems  in  the  Army,    it  would  go  to  them.     But  if 
it ' s  something  that  we  could  field  internally  to  Iraq,  it 
would  go  through  our  contract  and  budgeting  process . 

Where  our  building  was  located  on  Al  Faw 
Palace,   literally  eater-corner  to  us  right  across  the 
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street  was  contract  command,   so  we  were  able  to  interface 
with  them  on  a  regular  basis  to  make  sure  that  the 
process  went  smoothly. 

Q.  How  was  the  price  split  up  for  Active 

Directory? 

A.  Okay.     So  for  Active  Directory,    I  buy  my 

initial  platform  for  Active  Directory  which,   depending  on 
who  you  go  to  to  bid  for  it,   you  get  between  3500  and 
5,000  dollars  for  the  actual  platform  itself.     But  then 
I've  got  to  buy  a  server  platform  so  I'm  looking  at  2008, 
I  have  to  buy  an  enterprise  edition  for  that  because  of 
the  level  of  communications  I  have  to  have,    so  I'm 
looking  at  another,   again,   three  to  five  thousand 
dollars . 

The  problem  we  run  into  there  after  that, 
then  you're  talking  about  the  CAL.     So  for  every  machine 
that ' s  added  to  Active  Directory  in  Iraq,    I  have  to  have 
a  CAL  for  it.     And  also  on  top  of  that  for  every  user  I 
have  in  my  Active  Directory  list  within  my  domain  I  have 
to  have  a  CAL  for  them.     So  pricing  on  the  street  right 
now  is  between  35  and  65  dollars  for  a  CAL  for  each 
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individual  user  or  machine,    so  even  if  you  were  looking 
at,   even  if  we  said  we  paid  a  dollar  for  a  CAL,   which  we 
didn't,   it  would  be  160,000  dollars  just  to  support  the 
users  on  the  GAL  for  USFI . 

Q.  Could  you  please  explain  what  a  CAL  is? 

A.  Okay.     A  CAL  is  a  client  access  license. 

Again,   I  come  back  to  in  the  old  days  that  software 
companies  made  you  pay  a  whole  lot  of  money  for  their 
software,   so  people  looked  at  that  as  sticker  shock,  so 
they  said,   okay,   we'll  figure  out  a  different  way  around 
this.     So  then  they  came  out,  Microsoft  came  out  and  they 
reduced  the  cost  of  the  actual  piece,  but  what  they  did 
is  they  had  the  client  access  licenses  which  is  the 
requirement .     So  for  Exchange  it ' s  for  you  to  be  able  to 
communicate  to  databases ;   for  Active  Directory  it ' s  for 
you  to  be  able  to  add  users  to  your  domain  or  machines  to 
your  domain.     And  for  servers  it's  for  number  of  servers 
that  I  need  to  be  able  to  talk  to  and  how  many  instances 
I  need  to  be  able  to  install  it .     So  they  come  up  with 
this,   it's  really  a  smoke  and  mirrors  piece  of,   yes,  it 
still  comes  down  to  the  more  people  I  have  to  support  on 
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my  network,   the  more  expensive  it  gets. 

Q .  What  would  the  GAL ' s  functionality  have  been 

without  Active  Directory? 

A.  It  doesn't  function  without  it.     The  GAL  is  a 

direct  product  of  the  Active  Directory  global  address 
system. 

Q.  How  is  the  pricing  created  for  Exchange? 

A.  Okay.     So  for  Exchange,   depending  on  where  I 

was  putting  that  Exchange  server,    so  you  had  your  primary 
enterprise  Exchange  servers  at  USFI,   and  then  below  that 
in  each  local  instance  you  put  Exchange  servers  further 
down.      If  I've  got  a  BCT  sitting  out  there  I  don't  want 
for  the  staff,   I  don't  need  the  S2  and  the  S3  email  to 
have  to  go  all  the  way  up  to  division  and  come  back  down 
for  them  to  do  that .     So  I  put  a  local  Exchange  server 
there  to  be  able  to  increase  productivity  and  allow  them 
to  be  able  to  communicate  with  one  another  so  that  most 
of  my  communications  going  out  of  the  organization  are 
server  to  server,   so  that  helps  me  scale  it  a  little  bit. 

And  then  after  that,   so  that  allows  me  to 
figure  out  how  many  licenses  I  have  to  buy  for  the  base 
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software,   and  then  my  user  and  my  machine  population  help 
me  dictate  how  many  calls  that  I  have  to  buy  to  support 
that. 

Q.  Based  on  all  of  that,   how  much  money  was  spent 

on  Exchange  software? 

A.  For  Exchange  software  the  enterprise  license 

for  Exchange  software  would  have  run  us,  very 
conservative  estimate,   about  $60,000  for  the  USFI 
headquarters . 

MR.   Von  ELTEN :     Thank  you. 
THE  COURT:     Cross  examination. 
MR.   HURLEY:     Yes,  ma'am. 

CROSS  EXAMINATION 

BY  MR.  HURLEY: 

Q.  Good  morning,   Chief  Nixon. 

A.  Good  morning.  Sir. 

Q.  Now,   on  direct  examination  you  talked  with  the 

government  about  the  cost  of  maintaining  the  Active 
Directory? 

A.  Yes,  sir. 

Q.  And  I  just  want  to  go  over  this  Active 
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Directory,   Global  Address  List  distinction  again? 
A.  No  problem,  sir. 

Q.  All  of  the  infrastructure  that  you're  talking 

about  with  Captain  von  Elten,  that  was  about  the 
infrastructure  to  maintain  the  Active  Directory? 

A.  To  maintain  services. 

Q.  Right.     And  the  Active  Directory  is  the  thing 

that  maintains  services,   or  one  of  them? 

A.  It  is  the  backbone  for  your  services,  yes, 

sir . 

Q.  Right.     And  one  of  the  services  that  the 

Active  Directory  provides,   an  important  function  is  the 
Global  Address  List? 

A.  Yes,  sir. 

Q.  Chief,    I  can  tell  from  your  uniform  that 

you're  an  Army  officer? 
A.  Yes,  sir. 

Q .  So  let ' s  use  Army  C2  notes  when  we  talk  about 

the  structure  of  the  database . 
A.  No  problem,  sir. 

Q.  The  database  you  worked  with  in  the  one  in 
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Iraq  is  the  one  I'm  going  to  talk  about. 
A.  Yes,  sir. 

Q.  The  lowest  Army  echelon  with  the  Active 

Directory  is  the  brigade? 
A.  Yes,  sir. 

Q.  Thus  the  lowest  echelon  with  the  Global 

Address  List  is  the  brigade? 
A.  Yes,  sir. 

Q.  The  brigade's  subordinate  units  instead  of 

having  their  own  Active  Directory  and  Global  Address 
List,   they'll  just  plug  into  the  brigade's? 

A.  Well,   battalion  services  are  provided  by  the 

brigade .      It ' s  not  a  separate  network .     They  sit  within 
the  brigade ' s  services . 

Q.  Got  you.     So  we  move  up  the  chain  a  division 

level  in  the  Army  is  going  to  have  an  Active  Directory 
and  a  Global  Address  List? 

A.  Yes,  sir. 

Q.  And  subordinate  brigades  will  be  a  part  of  the 

division's  active  Global  Address  List? 

A.  Yes.     To  a  degree.     The  brigades  maintain 
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their  own  Active  Directory,   their  own  services 
environment,   and  those  services  talk  to  division 
environment  on  a  server  level  to  maintain  communications . 
So  you  don't  want  the  division  providing  service  to  the 
brigade,   it  tends  to  clog  the  networks. 

Q.  So  the  brigade  Active  Directory  plugs  into 

their  superior's  Active  Directory,   is  that  the  best  way 
to  describe  it? 

A.  Yes,  sir. 

Q.  And  then  the  divisions  for  the  time  that 

you're  in  Iraq,   we've  done  away  with  multinational  corps 
Iraq,  right? 

A.  Yes,  sir. 

Q.  So  at  this  point  USFI  had  direct  control  over 

the  divisions? 

A.  Yes,  sir. 

Q.  So  the  division  Active  Directory  GAL  would 

plug  into  USFI? 

A.  Yes,  sir. 

Q.  Now,   you  testified  that  you've  seen 

prosecution  exhibit  47  which  is  the  CD  that  the  Global 
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Address  List  is  located  on? 
A.  Yes. 

Q.  And  you  also  testified  that  you  had  seen 

before,   you  testified  before  that  you  saw  a  piece  of 
paper  with  the  Global  Address  List,   a  representation  of 
prosecution  exhibit  147? 

THE  COURT:     What  prosecution  exhibit  is  that? 

MR.   HURLEY:     The  CD,  ma'am? 

THE  COURT:     No.     The  paper. 

MR.   HURLEY:      147,  ma'am. 

THE  WITNESS:     Yeah,   the  digits  and  the  actual 
physical  printout,   yes,  sir. 
BY  MR.  HURLEY: 

Q.  Do  you  call  to  mind  the  prosecution  exhibit 

147  so  that  we  don't  have  to  — 

A.  Yeah,   that's  fine,  sir. 

Q.  All  right.     Now,   that  appeared  to  be  a  GAL? 

A.  Pieces  of  the  GAL,   yes,  sir. 

Q.  Now,   we  just  talked  about  there  are  different 

GAL  levels,  right? 

A.  Yes,  sir. 
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Q .  And  do  you  have  an  opinion  as  to  what  level 

this  GAL  was? 


A. 
Q. 

level  GAL? 
A 

Q 
A 

Q 
A 

Q 

A 

Q 


Yes,  sir. 

To  you,   prosecution  exhibit  147  is  a  division 


Yes,  sir. 

Not  a  brigade  level  GAL? 
No. 

Not  the  USFI  level  GAL? 
No. 

But  a  division  GAL? 
Yes,  sir. 

Now,    just  to  sum  up  something  I  started  off 
with  because  I  wanted  to  clear  up  that  confusion.  The 
maintenance  costs  that  you  talked  about  were  costs 
associated  with  an  Active  Directory? 
A.  Yes,  sir. 

Q.  And  the  maintenance  cost,   there  are  no 

maintenance  costs  specific  to  the  Global  Address  List? 

A.  If  you're  talking  about  actual  software  costs, 

you're  correct,  but  you  still  have  a  maintenance  cost  in 
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there  with  personnel.     You  can't  get  away  from  that. 

Q.  The  personnel  to  keep  up  the  Global  Address 

List? 

A.  Yes,  sir. 

Q.  And  those  personnel  would  be  those  people  on 

help  desks? 

A.  They  would  be  in  charge  of,   they  would  run 

adding  and  taking  away  from  the  Global  Address  List,  but 
overall  maintenance  piece  to  that  would  belong  to  the 
individual  managing  the  Active  Directory  for  that  piece . 

Q.  For  that  part  of  the  organization? 

A.  Yes.     So  if  you're  looking  at  the  division, 

they  had,   of  course  they  had  your  division  staff  and  you 
had  ITT  contractors  that  also  supported  that  piece  for 
the  divisions . 

Q.  Okay.     And  then,   now,   when  it  comes  to  this 

distinction  between  the  Active  Directory  and  the  Global 
Address  List,   the  Active  Directory  could  run  without  the 
Global  Address  List? 

A.  Yes. 

Q.  But  I  can  tell  the  concern  on  your  face,  but 
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that  would  be  a  very  difficult  function  to  have  just  an 
Active  Directory  and  not  a  Global  Address  List? 

A.  I  would  say  vice  versa,    I  would  say  the  exact 

opposite.     I  would  say  that,   yes,   I  can  have,   I  can, 
because  of  the  way  Active  Directory  is  set  up,   the  Active 
Directory  is  a  directory,   everything  sits  on  your  domain. 
So  if  for  some  reason  the  Active  Directory  wasn ' t  able  to 
produce  a  GAL,   that  would  mean  that  I  didn't  have 
anything  in  Active  Directory,    I  wouldn't  have  any  user,  I 
wouldn't  have  any  clients,    I  wouldn't  have  any  machines. 
So  it ' s  really  hard  to  separate  the  two  because  — 

Q.  They  are  so  closely  tied  together? 

A.  One  is  a  direct  product  of  the  other. 

Q.  And  that  is  the  G AL ' s  a  direct  product  of  the 

Active  Directory? 

A.  Yes. 

Q.  Got  it.     Thanks,  Chief. 

Now,   let ' s  talk  about  these  contracts  as  they 
would  come  into  your  organization  in  the  J6  when  you  were 
in  USFI  I'm  talking  about. 

A.  Yes,  sir. 
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Q.  As  the  contracts  would  come  in,   would  they 

come  in  as  operational  need  statements  or  how  does  the, 
how  do  those  two  things  work  together? 

A.  It  would  depend.     Again,   nature  of  the 

request.     For  an  operation  needs  statement,   you  have  two 
operational  need  statements,   you  have  one  that's  an  Army 
driven  piece  and  you  have  one  that's  a  joint  piece.  For 
instance,   everything  that  provided  theater  provided 
equipment  in  Iraq  would  have  been  a  joint  operational 
needs  statement,   because  everything  was  provided  out  of 
CENTCOM  budgeting  and  down  to  USFI  and  filtered  out  to 
the  network. 

So  odds  are  if  you  had  a  machine  that  was 
sitting  on  an  Iraq  dot  mil  network  or  domain,   then  that 
machine  was  provided  as  TP  equipment,   more  than  likely 
was  provided  as  TPE  equipment  and  filtered  down.  So 
through  a  joint  statement  or  going  down  through  the 
process.     For  an  Army  organization,    so  if  I'm  — 
Q.  Brigade  combat  team? 

A.  Brigade  combat  team,    41  Army  dot  mil 

infrastructure,   that  would  have  had  to  have  gone  through 
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the  DA,   Department,  of  the  Army  process.     Again,    it  comes 
up  through  USFI  headquarters  and  goes  out  through  there, 
so  we  would  be  the  brokers  for  them  to  the  Department  of 
Army  on  something  like  that .     So  you  had  two  ONs 
processes  for  those  pieces.     And  then  you  also  had  a 
localized  inner  theater  process  for  something  if  we  would 
fill  it  in  theater,  we  would  do  so. 

Q.  So  those  contracts  that  you're  talking  about 

with  Captain  von  Elten  and  the  money  you  spent,   was  that 
a  product  of  the  in  theater  needs  process? 

A.  Some  of  them  were.     So,    for  instance, 

day-to-day  updates,   things  like  that,   so  software  update 
for  Server  2008,   or  trying  to  get  2003  out  of  the 
network,   trying  to  upgrade  to  2008,   that  would  be 
something  we  fund  internally  from  USFI  budgeting. 

And  again,   anything,   but  for  instance,  the 
network  backbone  infrastructure  upgrade  that  we  talked 
about,   that  went  up  to  CENTCOM  and  then  back  out  because 
we  didn ' t  want  to  pay  for  it  because  it  was  for  the  state 
department  eventually  as  we  turned  things  over,   but  also 
because  it  was  a  massive  chunk  of  our  budget . 
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THE  COURT:     What  was  that  for? 
THE  WITNESS:     That  was  for  the  network 
upgrades ,  ma ' am . 

THE  COURT:     Thank  you. 
BY  MR.  HURLEY: 

Q.  What  I  want  is  the  general  practice,  not 

specific  to  ONs  or  this  contract  or  I'm  leading  into 
another  question  I  was  going  to  ask  you,  Chief. 
A.  No  problem. 

Q.  So  the  general  practice  was  this  document 

would  come  into  the  J6,   come  into  your  shop,   you  would 
take  it  and  first  review  it  for  a  technical  review? 

A.  Yes,  sir. 

Q.  And  as  you  were  doing  the  technical  review, 

you  would  also  have  input  into  the  budgeting  requirements 
that  were  included  in  this  document? 

A.  Yes,  sir. 

Q.  And  as  you  had  input,   you  would  vet  the  cost 

yourself,   the  costs  associated  with  these  things? 
A.  No.  No. 

Q .  You  would  not . 
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A.  No.     So  the  cost  for  the  vetting  process  would 

come  in  if  requirements  weren't  able  to  be  met  based  on 
whatever  J8  was  able  to  provide  for  cost .     So  we  would 
look  at  them  from  a,   yes,   you  need  to  buy  this  many  CALs, 
maybe  60  bucks  a  pop  is  way  too  much,   you  need  to 
reconsider,  but  as  part  of  the  overall  vetting  process 
the  J6  is  not  the  money  stamp,   the  J8  is. 


Q .  Got  you .     And  that ' s  exactly  the  people  I  want 
to  talk  to  you  about . 

A.  Yes,  sir. 

Q.  So  there  would  be  an  internal  process  inside 
the  J6? 

A.  Yes,  sir. 

Q.  A  technical  process? 

A.  Yes,  sir. 

Q.  A  cost  process? 

A.  Yes,  sir. 

Q .  Then  you ' d  have  to  walk  down  the  stairs  or 
down  the  hall,   however  you  got  there  to  the  J8? 

A.  Yes,  sir. 

Q.  And  the  J8  are  the  resource  managers,  were  the 
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resource  managers  for  the  USFI? 

A.  They  are  the  pocketbook. 

Q.  The  money  spenders? 

A .  Right . 

Q.  Before  you  went  down  there,   you  knew  that  you 

needed  to  have  a  defendable  thing  that  you  wanted? 
A.  Yes,  sir. 

Q.  And  the  cost? 

A.  Yes,  sir. 

Q.  And  before  you  go  down  there,   you  have  to  take 

a  hard  look  at  that  cost,   is  that  correct? 
A.  Yes. 

Q.  To  make  sure  that  not  only  does  it  cover  the 

thing  you  need,  right? 
A.  Yes,  sir. 

Q.  But  also  some,  because  you're  very  experienced 

and  this  wasn't  your  first  trip  to  Iraq,   the  extra  to 
address  easily  anticipated  things  that  you ' 11  need  along 
the  way,  right? 

A.  Yes,    sir.     Just  like  when  we're  talking  about 

CALs,   we,   you  know,   the  Iraq  network  at  its  apex  was 
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about  160,   165,000  people  on  the  GAL,  but  we  had  to  have 
a  cushion  for,  we  had  to  cushion  between  40  and  50,000 
calls,   and  a  lot  of  those  we  ended  up  issuing  out  to  TAC 
organizations  for  their  own  use. 


Q.  Had  to  have  a  cushion? 

A.  Yes,  sir. 

Q.  Had  to  have  or  not,    it  was  extraordinarily 

prudent  to  have  a  cushion? 
A.  Yes. 

Q .  Any  action  that  you  send  down  to  J8 ,    it ' s  good 

to  have  a  defendable  cushion  so  you  can  get  all  the  money 
you  need? 

A.  Yes,  sir. 

Q.  Fenced. 

A.  Yes,  sir. 

Q.  And  by  fenced  I  mean  saved  for  use  so  that  you 

can  spend  it  on  the  thing  that  you  want . 
A.  Yes,  sir. 

Q.  Let's  talk  about  this  infrastructure,  Chief. 


You  said  there  were  64  NIPR  servers  that  supported  the 
Active  Directory  Global  Address  List? 
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A.  Yes,  sir. 

Q.  And  more  virtual  service  that  supported  this? 

A.  Yes,  sir. 

Q.  Routine  problems  that  you  had  with  these 

during  your  deployment? 

A.  You  always  had  network  outages.     It's  a 

massive  network,   at  times,   at  best  you're  working  on 
questionable  infrastructure  at  best,   so  you  also  have 
bandwidth  issue  or  something  like  that . 

Q.  Band  width  issue  is  something  you'd 

characterize  as  a  small  problem? 

A.  Not  always. 

Q.  Scaleable? 

A.  Yes. 

Q.  A  big  problem,   satellite  outage  would  be  a  big 

problem? 

A.  Yes,  sir. 

Q.  But  those  problems  were  routinely  addressed 

during  this  2009,    2010  timeframe? 
A.  Yes,  sir. 

Q.  As  I  understood  from  what  you  told  me 
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yesterday,    90  percent  network  reliability  is  standard  for 
deployment? 

A.  Between  90  and  95  percent  is  the  standard.  We 

definitely,   district  99.999  percent.     That's  district 
standard  for  fixed  infrastructure .  Tactical 
infrastructure,   acceptable  is  95  and  better.     And  we 
definitely  were  well  within  that  piece,   between  that  95 
and  99  percent,  we  were,   for  the  most  part  we  were  there. 

Q.  And  just  weren't  static  on  Victory  Base 

complex,   were  you,   Chief,   during  this  deployment? 

A.  Not  at  all. 

Q.  You  went  all  over  the  country? 

A.  Yes,  sir. 

Q.  Trying  to  keep  different  units  at  different 

echelons  plugged  into  the  network  and  communicating 
properly? 

A.  Yes,  sir. 

Q.  And  when  we  talked  yesterday,   you  said  the 

USFI  network  while  you  were  there  had  a  reliability 
rating  of  97  percent? 

A.  Yes,  sir. 
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Q.  And  that  applies  to  both  the  Active  Directory 

and  the  Global  Address  List? 
A.  Yes,  sir. 

Q.  To  your  knowledge,  was  the  Global  Address  List 

ever  unavailable  because  servers  were  stolen? 
A.  No,  sir. 

Q.  To  your  knowledge,  were  they  ever  moved,  and 

by  they,    I  mean  the  servers  by  someone  not  authorized  to 
move  them? 

A.  We  had  equipment  moved  at  times,    sir,  you 

know,   brigade  commander  walks  in  and  says  I  don't  like 
that  crap  right  there,    I  want  you  to  move  it  over  there. 
We  ran  into  issues  like  that.     But  sitting  on  the  net 
work,   the  way  you  sat  on  a  network  it  was  something  that 
was  easily  identifiable,   so  they'd  get  the  call.  What 
are  you  guys  doing  down  there? 

Q.  So  even  at  USFI  you  had  visibility  such  that 

if  a  server  is  pulled  off? 

A.  Yeah,   yeah,   you  would  see  it  within  moments. 

MR.   HURLEY:     Just  one  second,    I  want  to  look 
at  some  notes . 
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THE  WITNESS:  Okay. 

MR.   HURLEY:     Thanks,   ma'am.     Nothing  further. 

THE  COURT:  Redirect. 

MR.   von  ELTEN:     Nothing,  ma'am. 

THE  COURT:      I  don't  think  I  have  anything 
either.     Temporary  or  permanent  excusal? 

MR.   Von  ELTEN:     Temporary,  ma'am. 

THE  COURT:     Chief,   once  again  you're 
temporarily  excused.     Please  don't  discuss  your  testimony 
or  knowledge  of  the  case  with  anyone  other  than  the 
counsel  or  the  accused. 

THE  WITNESS:     Thank  you,  ma'am. 

THE  COURT:     Counsel,   do  you  want  to  proceed 
or  is  this  a  good  time  for  about  a  ten  minute  recess . 

MR.   FEIN:     Great  time,  ma'am. 

THE  COURT:     Ten  minutes  sufficient? 

MR.   FEIN:     Yes,  ma'am. 

THE  COURT:     We'll  make  it  13.     Court  is  in 
recess  until  eleven  o'clock. 

(BRIEF  RECESS . ) 

THE  COURT:     Court  is  called  to  order.  Major 
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Fein,   please  account  for  the  parties. 

MR.   FEIN:     Yes,   ma'am.     All  parties  in  the 
court  last  recess  are  present  with  the  following 
exceptions:     Captain  von  Elten  is  absent,   Captain  Whyte 
is  present. 

THE  COURT:      Is  there  anything  we  need  to 
address  before  we  proceed? 

MR.   FEIN:     No,  ma'am. 

MR .   COOMBS :     No ,   Your  Honor . 

THE  COURT :     All  right .     Government . 

MR.   FEIN:     Ma'am,   the  United  States  calls 
Colonel  David  Miller. 
Whereupon : 

DAVID  MILLER, 
called  as  a  witness,   having  been  first  duly  sworn 
according  to  law,   testified  as  follows: 

DIRECT  EXAMINATION 

BY  MR.  FEIN: 

Q.  Sir,   you  are  Colonel  David  Miller,   the  current 

chief  of  staff  of  the  First  Infantry  Division? 
A.  I  am. 
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Q.  And,    sir,   how  long  have  you  been  the  chief  of 

staff  for? 

A.  A  couple  of  weeks. 

Q.  And,   sir,   what  are  your  responsibilities  as 

the  chief  of  staff  of  First  ID? 

A.  In  general  I  run  the  day-to-day  business  of 

the  division  at  Fort  Riley  and  its  outlying  satellites . 

Q.  And  what  was  your  position  before  becoming  the 

chief  of  staff  of  the  First  Infantry  Division? 

A.  I  was  the  commander  for  Brigade  Modernization 

Command  at  Fort  Bliss,  Texas. 

Q.  And  what  is  the  modernization  command? 

A.  It  is  a  subunit  for  a  training  command.  We 

conduct,   they  conduct  now  twice  a  year  network 
integrative  evaluations  in  order  to  do  doctrine 
organization  training  material  and  leadership  evaluations 
and  then  recommendations  to  the  chief  of  staff  of  the 
Army  to  provide  the  latest  equipment  and  techniques  to 
deploying  units . 

Q.  And,    sir,   what  were  your  actual 

responsibilities  within  the  brigade  —  excuse  me  —  the 
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command? 

A.  Yeah.     I  essentially  ran,   had  oversight  of  the 

planning  and  the  execution  of  each  of  those  network 
integrative  evaluations  that  were  done  twice  a  year. 

Q.  And,    sir,   how  long  were  you  the  deputy 

commander  of  that  command? 

A.  Two  years. 

Q.  And  what  was  your  duty  position  prior  to 

assuming  that  role? 

A.  I  was  the  commander  of  the  Second  Brigade 

Combat  Team,   Tenth  Mountain  Division. 

Q.  And  how  long  were  you  the  brigade  commander  of 

210  Mountain? 

A .  About  4 1  months . 

Q.  When  did  you  assume  command  and  when  did  you 

leave  command? 

A.  I  took  command  in  December  of  2007  and  I  took, 

I  left  command  in  late  spring  of  2011. 

Q.  Sir,   what  positions  did  you  hold  before 

becoming  the  210  Mountain  commander? 

A.  Prior  to  that  I  was  the  deputy  commander  for 
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the  operations  group  at  the  joint  grades  training  center 
at  Fort  Polk,   Louisiana.      I  was  at  the  Army  War  College 
for  a  year  before  that .     And  I  was  the  commander  of  the 
First  Battalion,    14th  Infantry  prior  to  that. 

Q.  And  sir,    from  your  time  at  the  JRTC,   what  were 

your  responsibilities  there? 

A.  Essentially  I  assisted  the  commander  of 

operations  group  in  all  facets  of  his  duties  which 
primarily  focused  on  providing  coaching  and  mentoring  to 
brigade  commanders  and  their  staffs  and  battalion 
commanders  and  their  staffs  for  the  rotational  unit  as 
they  came  through. 

Q.  Sir,   what's  the  operations  group  at  the  JRC, 

were  they  in  charge  of  all  the  observer  controllers? 

A.  Yes.     That  was  the  purpose  of  the  operations 

group  was  to  run  all  of  the  OC  teams  during  their 
rotational  cycles . 

Q.  Sir,   as  the  deputy  commander  for  the  COG,  were 

you  also  an  observer  controller? 

A.  Yes. 

Q.  And  who  did  you  observe  and  control? 
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A.  For  the  most  part  I  focused  on  the  brigade 

commanders  and  their  staffs,   and  to  some  extent  the 
battalion  commanders . 

Q.  How  many  brigades  rotated  through  while  you 

were  fulfilling  the  role  of  an  observer  controller? 

A.  Ten,   which  is  the  standard  for  any  given  year 

for  a  CTC. 

Q 
A. 

Q 
A. 

Q 
A. 
2007. 

Q.  And  again,    sir,   when  did  you  take  command  of 

your  brigade? 

A.  In  December  of  the  same  year,  2007. 

Q.  And,    sir,   when  you  took  command  of  210 

Mountain,   when  did,   at  that  time  when  had  the  brigade 
last  deployed? 

A.  They  had  just  returned  from  a  15  month 


And,    sir,   what  is  your  branch  in  the  Army? 
I'm  an  infantryman. 

And  how  long  have  you  been  an  infantryman? 
Twenty-seven  years . 

Sir,  when  did  you  first  arrive  at  Fort  Drum? 
I  arrived  there  in  the  fall,   September  of 
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deployment  just  before  Thanksgiving  of  that  same  year. 

Q.  And  when  you  took  command,    sir,   what  was  the 

brigade  mission  and  garrison? 

A.  When  I  took  command  we  went  through  about  a 

six  month  reset,    reorganization  time  period,   and  then 
that  summer  we  assumed  the  global  response  force  mission 
for  the  Army. 

Q.  And,    sir,   what  is  the  global  response  force 

mission? 

A.  At  any  given  time  the  Army's  got  one  brigade 

combat  team  designated  to  be  on  a  short  string,   if  you 
will,   short  notice  deployment  to  any  unexpected  hot  spots 
that  may  arise  anyplace  in  the  world. 

Q.  And,    sir,   how  many  brigades  are  designated 

with  that  global  force  response  team? 

A.  At  any  given  time,  one. 

Q .  And  what  were  the  brigade ' s  responsibilities 

in  regard  to  the  global  response  force  mission? 

A.  It  was  to  stay  in  a  trained  status  both  with 

respect  to  personnel  manning,   equipment,   and  then  the 
unit  proficiency,   training  proficiency,   and  then  be  able 
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to  respond,   as  I  mentioned,   on  short  notice  based  on 
indications  and  warnings  to  any  kind  of  an  operation, 
from  humanitarian  assistance  to  full  combat  operations. 

Q.  And,    sir,   when  did  the  brigade  transition  into 

preparing  for  a  future  deployment,  approximately? 

A.  About  a  year  after  that,   so  2008,   yeah,  summer 

of  '08. 

Q.  Sir,   have  you  ever  met  PFC  Manning?  I'm 

sorry,    sir.     Just  before  that. 
A.  Sure. 

Q.  You  arrived  when  to  210  Mountain? 

A.  I  took  command  in  December  of  2008. 

Q.  Okay,    sir.     And  then  when  did  — 

A.  So,    I'm  sorry.     You  asked  me  about  the  time 

line.     So  summer  of  2009  would  have  been  when  we  started 
our  transition  from  that  mission  towards  focus  on 
deployment . 

Q.  And  what  was  that  focus  in  the  summer  of  2009? 

A.  Initially  Afghanistan. 

Q.  Okay,    sir.     And  what  did  it  change  to? 

A.  To  Iraq. 


Provided  by  Freedom  of  the  Press  Foundation 


1 

2 
3 
4 
5 
6 
7 
8 
9 
10 
11 
12 
13 
14 
15 
16 
17 
18 
19 
20 
21 


UNOFFICIAL  DRAFT  -  6/28/13  Morning  Session 

80 

Q.  Sir,   have  you  ever  met  PFC  Manning? 

A.  Excuse  me.     Yes,    I  have. 

Q.  And  when  was,   when  about  was  the  first  time 

you  met  PFC  Manning? 

A.  It  was  sometime  during  the  time  period  we  were 

on  the  global  response  force  mission. 

Q.  And  what  —  and  how  did  you  meet  him? 

A.  As  part  of  our  maintaining  readiness  for  that 

mission  we  would  do  weekly  staff  updates  to  myself  and 
the  battalion  commanders  focusing  on  different  global  hot 
spots,   if  you  will,   or  regional  areas  to  maintain  our 
situational  awareness  and  understanding.     And  as  part  of 
that,   PFC  Manning  gave  part  of  the  intel  update  during  a 
few  of  those  weekly  updates . 

Q.  Sir,   was  it  common  for  a  junior  enlisted 

soldier  to  be  briefing  the  commander  during  staff  updates 
like  that? 

A.  No,   not  really. 

Q.  So  why  in  the  S2  section  did  that  happen? 

A.  I  believe  because  of  the  S2  approach  as  part 

of  junior  soldier  and  leader  development  was  to  have  them 
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prepare  for  and  conduct  those  briefings  as  part  of  their 
professional  development . 

Q.  And,   sir,   did  you  deploy  as  the  brigade 

commander  of  210  Mountain? 

A.  Yes. 

Q.  And  was  that  your  first  —  when  was  that 

deployment? 

A.  That  was  from  the  fall  of  2009  to  the  summer 

of  2010. 

Q.  Sir,   was  that  your  first  deployment? 

A.  No. 

Q.  How  many  deployments  have  you  had  in  your  past 

27  years? 

A.  Four. 

Q.  Could  you  briefly  describe  those,  please? 

A.  I  had  two  combat  deployments,   one  as  a  brigade 

commander,   210,   to  Iraq;   another  14  month  deployment  as  a 
battalion  task  force  commander,   also  to  Iraq.     And  then 
two  other  operational  deployments  to  the  Balkans . 

Q.  I'm  sorry,    sir,   you  just  answered  this,  the 

length  of  the  deployment . 
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What,  was  the  brigade ' s  area  of  responsibility 
to  Iraq  when  210  deployed? 

A.  We  were  responsible  for  all  of  eastern  Baghdad 

and  the  province  to  the  east  of  Baghdad. 

Q.  And,    sir,   when  your  brigade  deployed,  what 

division,   what  U.S.   division  did  you  fall  under  in  Iraq? 

A.  U.S.   Division  Center. 

Q.  And  what,   during  your  deployment,    sir,  what 

actual  combat  division  headquarters  fulfilled  or  were  the 
USDC? 

A.  I  got  you.      Initially  it  was  the  First  Cav 

Division  for  about  the  first  roughly  three  months,  and 
then  First  Armored  Division  after  that . 

Q.  Sir,   going  back  to  the  area  of  responsibility 

of  your  brigade,   how  would  you  describe  or  could  you 
please  describe  for  the  court  the  size  of  210  Mountain's 
AOR  within  Iraq? 

A.  I  think  it  was  roughly  about  500  square 

kilometers  or  so .      It  was  a  pretty  big  AOR  for  a  brigade 
combat  team. 

Q.  And  what  were  the  primary  FOBs,   COBs,   JSSs  in 
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your  AOR? 

A.  The  brigade  was  dispersed  across  about  17  or 

18  different  size  combat  outposts,    joint  security 
stations  and  forward  operating  bases .     The  two  primary 
brigade  outposts  were  FOB  Hammer,   which  was  outside  the 
city  and  Joint  Security  Station  Loyalty  in  the  city.  So 
the  brigade  main  was  out  at  Hammer  and  my  forward  command 
post  was  at  Loyalty. 

Each  battalion  had  their  outpost  and  so  I  had 
two  maneuver  battalions  in  the  city  itself  and  two 
maneuver  battalions  outside  the  city. 

In  the  city,   in  addition  to  those  two 
battalion  locations,   we  had  about  seven,   about  seven 
company  platoon  sized  outposts  dispersed  throughout  the 
area  from  Sadr  City,   possibly  south  to  Savnia,   and  then 
out  to  Radi  and  the  outer  area  we  had  a  platoon. 

Q.  Sir,   where  was  your  brigade  headquarters? 

A.  The  main  headquarters  was  at  FOB  Hammer. 

Q.  And  where  was  the  majority  of  your  brigade 

staff  located? 

A.  Most  of  the  staff  was  at  Hammer  with  the  main, 
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and  then  a  small  staff  forward  at  JSS  Loyalty  with  the 
forward  CP . 

Q.  And,    sir,   how  far  was  FOB  Hammer  from  Baghdad? 

A.  Probably  about  60  kilometers. 

Q.  Sir,   how  long  had  the  brigade  headquarters 

building  been  located  at  FOB  Hammer  by  the  time  210  took 
over? 

A.  It  was  just  established  there.     As  part  of  our 

transition  with  the  unit  we  replaced,  we  had  agreed  and 
arranged  that  the  brigade  main  would  move  out  of  Loyalty 
out  to  Hammer,   be  established  during  the  transition,  our 
brigade  would  fall  in  on  it,   and  that  was  done  as  part  of 
the  condition  setting  to  reduce  the  footprint  of  U.S. 
forces  inside  the  city. 

Q.  Sir,   could  you  please  briefly  describe  for  the 

court  what  were  the  key  over-arching  tasks  of  your 
brigade  for  your  deployment? 

A.  Sure.     So  we  were  there  for  the  last  OIF 

mission  and  the  transition  to  Operation  New  Dawn,  New 
Dawn  being  the  drawdown  of  forces  in  theater,  the 
response  drawdown.     So  we  had  a  twofold  mission  as  we  saw 
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it,   as  I  saw  it. 

First,   it  was  to  build  capacity  in  the  Iraqi 
security  forces  and  simultaneously  create  enough 
stability  amongst  the  population  to  insure  that  the 
threats  that  were  left  when  we  pulled  out  would  be 
manageable  by  the  Iraqi  security  forces .     And  then  with 
that  accomplished,  make  a  transition  to  the  responsible 
drawdown  of  our  forces  in  theater  and  make  a  transition 
to  operation  New  Dawn . 

Q.  And,    sir,    in  a  general  and  in  an  unclassified 

manner,  what  was  the  general  nature  of  the  threat  against 
the  brigade  in  Iraq  at  the  time? 

A.  There  were  certainly  still  a  threat  there. 

Not  quite  the  volume  that  I  had  experienced  in  the 
previous  deployment,   but  we  were,   for  example,  still 
taking  indirect  fire  attacks  within  the  city  on  a  regular 
basis,   you  know,   several  per  week,  both  in  and  outside 
the  city,    still  hitting  IEDs  roughly  on  a  daily  basis  or 
every  couple  days  or  so,   and  periodic  direct  fire 
attacks . 

Q.  Sir,    I'd  like  to  now  focus  or  have  you  focus 
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on  the  first  of  the  major  missions  you  just  spoke  about, 
the  training  of  Iraqis.  For  that  mission,  sir,  what  was 
the  main  effort  for  your  brigade  staff? 

A.  For  the  staff,   the  focus  was  on  help  with 

partnering  with  our  Iraqi  partners  and  helping  them  build 
their  staff  capacity.     That  is,   the  planning  and 
synchronization  oversight  of  their  operations.     We  were 
partnered  with  two  Iraqi  divisions,   First  Federal  Police 
and  the  Ninth  Iraqi  Army,   and  also  with  a  core  level  or 
equivalent  headquarters,   the  Rasafa  command  three  scar 
headquarters  in  eastern  Baghdad.     So  we  worked  with  them 
on  their  skills  of  military  decision  making  process, 
intelligent  preparation  of  battle  field,   and  simple 
operations  in  time  and  space.     So  for  my  staff  that's 
what  their  decisive  action  was . 

Q.  Now,    sir,   was  that  the  decisive  action  for 

your  staff  while  they  were  also  working  as  your  staff? 

A .  Absolutely . 

Q.  And  how  did  that  occur,  sir? 

A.  Well,   so  they  spent,   the  staff  principals 

spent  most  of  their  time  partnered  with  their 
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counterparts  on  those  three  different  headquarters,  so 
you  can  imagine  that  was  a  pretty  time  intensive  piece. 
So  most  of  their  daytime  operation  were  with  their  staff 
counterpart .     And  then  the  routine  tasks  and  actions  that 
were  required  to  keep  the  brigade  running,   if  you  will, 
were  done  at  night,   as  well  as  other  staff  planning  and 
actions  that  took  a  little  bit  more  time  and 
uninterrupted  concentration. 

Q.  Sir,   how  many  soldiers  did  you  have  in  your 

brigade? 

A.  We  had  about  4,000  deployed  soldiers. 

Q.  And  how  many  Iraqis  was  the  brigade  partnered 

up  with  to  train? 

A.  I'm  going  to  estimate  about  10,000  or  so. 

Q.  Sir,   now  I'd  like  to  ask  you  a  few  questions 

about  what  you  earlier  testified  about  the  second 
mission,   the  responsible  drawdown.     What  did  you  mean  by 
the  responsible  drawdown  of  your  brigade? 

A.  Well,   responsible  is  the  keyword,   that  we 

wanted  to  hand  over  the  fight  to  a  capable  Iraqi  force, 
and  that  the  transition  period  needed  to  be  smooth, 
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seamless  and  transparent,  to  the  population,   meaning  no 
drop  in  security  while  it  was  occurring  so  that  their 
day-to-day  lives  went  on  uninterrupted  without  major 
change  or  turmoil . 

So  to  do  that,   it's  a  pretty  complex 
operation  with  a  number  of  simultaneous  actions  happening 
together . 

First,   we  had  to  physically  hand  over  the  18 
or  so  outposts  that  we  owned  to  our  Iraqi  counterparts, 
if  they  wanted  them,   and  that  was  both  a  physical 
property  turnover  and  a  physical  ownership  that  had  to  be 
overseen  by  the  Iraqi  minister  of  the  interior.      It's  a 
very  deliberate  process . 

Simultaneous  with  that  and  probably  more 
important  was  transfer  of  authority  for  security  of  those 
areas  surrounding  those  outposts  to  our  Iraqi 
counterparts .     Part  of  that  was  a  strategic 
communications  effort  to  broadcast  that  across  the  local 
area  so  that  the  population  knew  this  was  occurring.  And 
there ' s  a  large  ceremonial  piece  that  went  with  that  to 
make  sure  it  was  known  publicly  and  that  they  could  get 
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credit  or  could  get  the  credit  they  were  due  for  taking 
that  ownership  very  celebrated  by  the  Iraqi  people  in  the 
local  areas . 

While  that  was  happening,  we  also  had  to  turn 
in  all  the  theater-owned  equipment  that  had  built  up  over 
the  past  ten  years  of  having  been  in  country,   turned  that 
into  central  locations  for  eventual  shipment  back  to 
Kuwait,   and  eventual  shipment  back  to  the  continental 
U.S. 

Along  with  that,   we  had  to  prepare  our  own 
equipment  for  shipping  back  to  Fort  Drum  and  other  places 
that  attachments  came  from  and  the  planning  of  our  normal 
redeployment  activities  that  any  other  unit  now  would  do . 

Q.  Sir,   when  was  the  decision  point  on  when  to 

shift  your  main  focus  and  effort  to  the  responsible 
drawdown  from  training  Iraqis? 

A.  Right.     We  had  a  decision  point,   the  elections 

were  held  late  February,   early  March. 

Q.  I'm  sorry,    sir.     What  elections? 

A.  The  Iraqi  government  elections  were  held  in 

that  time  period  and  we  had  a  decision  point  a  few  weeks 
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after  that  to  determine  whether  or  not  we  had  met  the 
conditions,   meaning  Iraqi  security  forces  competent 
enough  and  population  stable  enough  to  make  the 
transition  in  priority  of  work  from  those  two  tasks  to 
the  drawdown  of  our  forces  in  theater. 

Q.  Sir,   did  the  drawdown  mission  begin  concurrent 

with  the  training  mission? 

A.  Yes,  sir. 

Q.  And  was  that  —  what  was  the  focus  of  your 

brigade  staff  during  this  time  for  the  whole  deployment 
then? 

A.  It  remained  on  capacity  capability  for  those 

three  staffs  that  I  mentioned  and  their  Iraqi 
counterparts . 

Q.  And,    sir,   which  BCT  was  the  first  to  drawdown 

in  Iraq? 

A.  Our  brigade  was  the  first  brigade  to  begin 

responsible  drawdown  and  initiate  the  transition  to 
Operation  New  Dawn . 

Q.  Sir,   what  major  challenges  did  the  brigade 

face  with  such  a  diverse  mission? 


Provided  by  Freedom  of  the  Press  Foundation 


1 

2 
3 
4 
5 
6 
7 
8 
9 
10 
11 
12 
13 
14 
15 
16 
17 
18 
19 
20 
21 


UNOFFICIAL  DRAFT  -  6/28/13  Morning  Session 


91 


A.  One  was  just  the  diversity  of  the  mission 

required  a  lot  of  intellectual  energy  going  in  a  lot  of 
different  directions.     There  was  the  physical 
dispersement  of  the  force  which  was  a  challenge,   and  we 
had  a  challenge  with  our  communications  network  being 
able  to  physically  cover  the  territory  that  we  were 
operating  in.     So  we  pretty  much  had  the  combo  network 
pretty  much  stretched  to  its  limits  with  the  duties  we 
had  to  do . 

Q.  And,    sir,   with  reference  to  communication, 

what  type  types  of  problems  did  you  have? 

A.  The  biggest  ones  for  myself  and  support  unit 

was  connectivity,   especially  during  key  times  like 
update,  brigade  to  division,   brigade  to  battalions,  and 
laterally . 

Q.  And,    sir,   when  you  talk  about  networks  and 

communication,   what  networks  and  types  of  communications 
are  you  talking  about? 

A.  My  late  brain.      I  was  talking  about  all  combo, 

whether  it  be  FM  communications,    secure  voice,  Internet, 
email  traffic,   all  secure  networks,  VTCs, 
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teleconferences,   all  of  it. 

Q.  Sir,   did  that  include  the  use  or  having 

connectivity  of  SIPRNET? 

A.  Yes. 

Q.  And  how  important,   if  at  all,    sir,   was  SIPRNET 

to  the  brigade's  mission? 

A.  It  was  critical. 

Q.  Why,  sir? 

A.  SIPRNET  is  the  primary  means  of  communicating 

in  theater,   not  just  for  our  brigade,  but  for  everybody. 
So  almost  everything  we  do  or  did  was  over  SIPR. 

Q.  SIPR,   how  often  did  you  personally  use  SIPRNET 

in  theater? 

A.  About  all  the  time,   every  day. 

Q.  How  often  did  your  brigade  staff  use  SIPRNET 

in  theater? 

A.  The  same,   all  the  time. 

Q.  What  about  junior  staff? 

A.  Same. 

Q.  Sir,   did  most  junior  staff  have  NIPR  computers 

with  access? 


Provided  by  Freedom  of  the  Press  Foundation 


1 

2 
3 
4 
5 
6 
7 
8 
9 
10 
11 
12 
13 
14 
15 
16 
17 
18 
19 
20 
21 


UNOFFICIAL  DRAFT  -  6/28/13  Morning  Session 

93 

A.  No,   not  directly.      If  they  did,    it  would  be 

one  computer  per  X  number  of  soldiers  that  they  could  get 
to  if  they  needed  to. 

Q.  And  why  is  that,  sir? 

A.  As  I  mentioned,   really  no  need.      I  mean 

99.99999  percent  of  activity  was  done  on  SIPR  side,  so 
that  was,    SIPR  was  as  normal  in  theater  as  NIPR  is  in  the 
garrison . 

Q.  Sir,   how  often  did  your  staff  leave  FOB 

Hammer? 

A.  Primary  staff,   the  principals,   DVl,   DS2,  DS3, 

DS4  had  a  regular  basis  out  of  a  course  of  a  week  to  do 
their  engagements  with  their  Iraqi  counterparts . 

Q.  And  then  how  often  then  did  junior  soldiers  on 

your  command  leave  FOB  Hammer? 

A.  Seldom  to  never. 

Q.  Sir,   what  concerns  did  you  have  for  soldiers 

who  never  left  the  FOB? 

A.  Getting  stuck  in  what  we  would  call  a  Fobbit 

rut . 

Q.  What  do  you  mean  by  that,  sir? 


Provided  by  Freedom  of  the  Press  Foundation 


1 

2 
3 
4 
5 
6 
7 
8 
9 
10 
11 
12 
13 
14 
15 
16 
17 
18 
19 
20 
21 


UNOFFICIAL  DRAFT  -  6/28/13  Morning  Session 

94 

A.  Well,    I  mean  if  you're  on  a  FOB  and  you're 

never  leaving  the  wire,   then  things  —  and  your  job  is 
tied  to  a  computer  screen  on  a  daily  basis,   you  know, 
your  mental  edge  or  intellectual  energy,    if  you  will,  can 
kind  of  start  to  get  greyed  out .     So  getting  stuck  in  a 
rut,    in  a  routine,   and  getting  stuck  in  a  mundane,  you 
know,   battle  rhythm  could  cause  you  to  lose  focus, 
concentration  and,   you  know,   that  alertness  that  goes 
with  staying  on  your  game . 

Q.  Sir,   when  you  were  at  FOB  Hammer,   did  you  know 

that  soldiers  had  played  music,  movies  and  games  on 
SIPRNET? 

A.  I  had  an  awareness  in  the  periphery  of  my  mind 

that  folks  were  listening  to  music  and  that  kind  of  thing 
on  systems . 

Q.  And,   sir,   since  it  was,   you  said  awareness  as 

you  said  in  the  periphery  of  your  mind,   why  was  having 
movies,   music  and  games  on  SIPRNET  not  a  concern  for  you? 

A .  There  wasn ' t  anything  about  that  that  had 

anything  to  do  with  any  kind  of  impact  on  the  mission  at 
hand  and  the  operational  effectiveness  of  those  soldiers 
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doing  their  day-to-day  jobs . 

Q.  Was  there  a  benefit,    sir,   to  having  that  on 

SIPRNET? 

A.  Well,    I  would  say  that  there's  a  benefit  to 

anybody  who's  got  a  job  that  keeps  them  in  one  work  space 
in  a  cubicle  working  on  a  computer  to  have  something  like 
music,   periodic  interruption  of  a  game,   whether  it  be 
solitaire  or  whatever,   to  a  break,   to  break  the  monotony 
of  what  they ' re  doing  as  part  of  their  normal  operations . 

Not  unlike  a  college  student  studying  for 
exams  may  be  listening  to  music  while  they're  studying, 
or  if  you  go  in  the  dentist  office  and  you're  getting 
your  teeth  worked  on  the  hygienist  has  a  radio  playing  in 
the  backdrop  while  they're  doing  their  job.      I  think  that 
there ' s  some  value  probably  to  that . 

Q.  Sir,   at  any  point  during  your  brigade's 

deployment,   did  the  amount  of  information  on  the  SIPRNET, 
the  amount  become  a  problem? 

A.  We  believed  so,  yes. 

Q.  And  what  was  the  problem,  sir? 

A.  Well,    I  don't  remember  the  exact  timeframe, 
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probably  January  or  so,  we  were  having  these  problems 
maintaining  connectivity.     For  example,   during  the 
division  update  briefs  when  all  the  brigade  commanders 
were  on  the  net  communicating  their  analysis  of  what  had 
transpired  the  previous  week  with  the  division  commander 
and  we  would  frequently  get  dropped  off  the  net  during 
those  time  periods . 

So  I  had  turned  to  my  staff  and  said  we  got 
to  figure  out  why  this  is  happening  and  what  can  we  do  to 
get  this  working  right.     We  didn't  want  to  have 
interruptions  during  that  time  period,   or  when  UAV  feeds 
were  coming  in  during  specific  operations  or  that  kind  of 
thing . 

When  they  came  back  to  me,   part  of  the  issue 
was  we  had  a  bandwidth  management  challenge  that  was  part 
of  the  cause  for  this,   and  so  part  of  the  problem  with 
that,   as  I  understood  it,   was  too  much  stuff  on  the  net 
at  any  given  time,   and  that  was  causing  the  drops  that 
were  occurring  as  it  was  explained  to  me .     So  that  was  a 
problem  that  we  were  faced  with. 

Q.  So,   sir,   what  I  guess  remedial  measures  did 
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you  direct  in  order  to  fix  that  problem? 

A.  Well,   based  on  the  recommendations,    I  asked 

the  staff  what  could  we  do.     Some  of  those  things  were 
limiting  access  during  key  times,    so  putting  in  protocols 
that  would  say,   hey,   only  these  things  can  be  running 
during  this  time  to  maintain  minimal  connectivity  and 
allow  for  the  main  event  like  an  update  brief  with  the  CG 
or  UAV  feed  during  a  key  operation  to  not  get  disrupted. 

Taking  a  look  at  systems  that  weren 1 t  being 
used  very  frequently  and  taking  them  off  the  net 
permanently . 

Eliminating  generic  user  names  like  technical 
operations  center  battle  captain  so  that  not  anybody 
could  jump  in  there  with  that  user  word  and  use  it  for 
something  other  than  its  designed  intent  for  the  mission. 
Things  of  that  nature . 

Q.  Sir,   was  any  of  these  remedial  measures  that 

you  ordered,   were  any  of  them  done  for  security  reasons? 

A.  No.     We  were  looking  at  this  from  a  network 

connectivity  standpoint,   that  was  the  problem  at  hand. 

Q.  And,    sir,   are  you  familiar  with  the  program 
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WGet? 

A.  I  am  familiar  with  it  now. 

Q.  What  do  you  mean  by  that,  sir? 

A.  I  wasn't  aware  of  it  at  all  during  our  time  in 

theater.     Since  this  entire  security  breach  occurred  and 
learning  about  that  as  part  of  in  the  aftermath  I  learned 
what  it  is . 

Q.  So  because  of  this  case  we're  here  today  for, 

sir,   you  learned  about  it? 
A .  Right . 

Q.  Sir,   are  you  familiar  with  mIRC  chat? 

A.  I  am. 

Q.  And  what  is  mIRC  chat? 

A.  It ' s  a  system  that  we've  been  using  and  we 

were  using  at  the  time  that  allows  collaboration  within  a 
network,   in  our  case,   between  division  brigade  and 
battalion  staffs,   so  that  you  can  communicate  vertically 
and  horizontally.     Significant  to  us  simultaneously 
because  that  enables  collaboration  which  is  at  the  heart 
of  mission  command. 

Q.  Sir,   did  your  staff  use  mIRC  chat  deployed  in 
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Iraq? 

A.  Yes. 

Q.  Did  the  division  use  mIRC  chat? 

A.  Yes. 

Q.  Sir,   what  was  the  benefit  of  mIRC  chat? 

A.  Like  I  said,   it  allowed  collaboration. 

There ' s  two  reasons  why  that ' s  so  important .      In  its  most 
immediate  need,  by  way  of  example,   a  combat  patrol  hits 
an  IED,   makes  an  IED  strike,    so  now  all  the  react  to 
contact  rules  go  into  play.     Without  mIRC  chat  that 
report  of  the  IED  hit  could  come  up  in  a  single  chapel, 
let ' s  say  to  a  platoon  to  battalion  to  brigade  to 
division . 

If  they  need  a  med-evac,   that  same  request 
goes  up  those  single  channels .      If  they  need  reinforcing 
fire,   attack  aviation  or  something  like  that,    same  thing, 
that  request  goes  up  through  those  channels,  gets 
approved  or  cleared  at  each  level,   and  then  it  comes  back 
down.      If  they  need  an  EOD  team,    same  thing.     That  all 
takes  time.     And  when  you're  in  a  fight,   time  is 
critical . 
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With  chat,   that  information  goes  to  everybody 


same  time.     So  the  division  staff  knows,  battalion, 
brigade,   battalion  staff,   commanders  are  aware  if  they're 
tracking  and  so  the  request  for  med-evac  goes  through 
instantaneously.     EOD  goes  right  away.     Plus  from  a 
commander  standpoint  everybody ' s  got  situational 
awareness . 


they've  got  to  alert  around  it,   not  get  bogged  down  in 
that  bottleneck,   they  can  do  it.      If  there's  a  quick 
reaction  force  that  need  to  be  put  on  alert  or  get 
launched  it  can  all  happen  in  a  fraction  of  the  time  it 
would  have  taken  without  a  system  like  mIRC  chat . 

Q.  Sir,   when  did  your  brigade  start  using  mIRC 


So  other  combat  patrols  in  the  area,  if 


chat? 


A. 


At  the  time  we  got  on  the  ground. 


Q. 


How  do  you  know  that,  sir? 


A. 


We  picked  it  up  from  the  unit  that  we  were 


replacing  about  part  of  our  relief. 


Q. 


And  what  unit  was  that? 


A. 


Third  Brigade  of  the  82nd. 
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Q.  And  why  did  you  use  it  just  because  382  was 

using  it? 

A.  Well,    it  wasn't  just  because  382  was  using  it. 

It  really  was  that  was  the  system  that  was  being  used  in 
theater  in  U.S.   Division  Center  at  the  time.     So  to  be 
compatible  with  everybody  else  in  theater,   you're  going 
to  use  the  systems  at  play. 

Q.  So  now  I'd  like  to  ask  you  a  few  questions 

about  your  brigade  headquarters  and  the  TOC  and  the  S2 
SCIF  area.     Where  was  your  office  located  at  FOB  Hammer? 

A.  My  office  itself  was  on  FOB  Hammer  inside  the 

brigade  headquarters . 

Q.  And,   sir,   could  you  please  describe  the 

building  or  tent?     What  type  of  infrastructure  or  — 

A.  Yeah.     So  we  had  hard  stand,   hard  structure 

building  inside  the  FOB  that  was  the  brigade 
headquarters . 

Q.  And,    sir,   where  was  the  S2  SCIF  office 

located? 

A.  Same  building  with  the  brigade  headquarters, 

so  my  office,   the  brigade  tactical  operations  center 
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itself  and  all  the  staff  functions  were  all  inside  that 
one  building. 

Q.  And,    sir,    could  you  briefly  describe  for  the 

court  how  one  would  walk  in  from  the  front  of  your 
brigade  headquarters  and  get  to  the  SCIF? 

A.  Sure.     So  —  excuse  me.     You'd  come  in  the 

main  entrance  which  was  pretty  much  center  mass  of  the 
building.     The  first  thing  you'd  come  to  was  a  small  card 
stand  if  you  will . 

THE  COURT :      I'm  sorry . 

THE  WITNESS:     Like  a  desk  about  the  size  of 
what  I'm  sitting  in  front  of  you  which  is  where  we  had  a 
spot  for  a  security  post . 
BY  MR.   von  ELTEN : 

Q.  Sir,   were  there  guards  that  were  manning  that 

post? 

A .  Only  at  night . 

Q.  And  why,  sir? 

A.  One,   that  was  low  personnel  manning  time 

period,    so  there  wasn't  as  many  people  in  the  building  to 
check  who  was  coming  in  and  out .     Because  of  the  battle 
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rhythm  of  daytime  operations  that  I  talked  about,  the 
volume  of  folks  that  were  around  to  see  who  was  coming  in 
and  out  was  ample,  we  thought,   to  check  folks  that  didn't 
have  normal  day-to-day  business  inside  the  headquarters . 

Q.  Sir,    for  someone  to  walk  in  when  there  was  a 

guard,  was  there  a  challenge  password  in  place?     How  did 
you  verify  to  get  past  the  guards? 

A.  Good  to  use  the  analogy  of  challenging 

passwords .     Just  like  you  would  do  for  regular 
challenging  passwords,   if  the  guard  recognized  the  person 
that  was  there  and  recognized  that  they  were  part  of  the 
organization,   there  was  no  challenge,    just  visual 
identification,   you're  good  to  go. 

Q.  When  you  say  the  organization,    sir,    is  it  your 

whole  brigade,   is  it  your  staff? 

A.  The  staff  or  anybody  who  had  normal  duties 

within  there  or  reason  to  be  there  like  a  battalion 
commander,   battalion  sergeant  major,    folks  like  that.  If 
not,   then  they  asked  them  what  they  needed  and  where  did 
they  need  to  do  go,   and  then  they'd  get  somebody  from  the 
appropriate  staff  and  they'd  come  in  and  out. 
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Q.  I  interrupted  you,   sir,    I  apologize.     You  were 

talking  about  once  you  walked  past  the  guard  station. 

A.  Yeah.     The  tactical  operations  center  was  just 

past  that  where  the  operation  sergeant  major  and  the  key 
folks  were .     And  then  there  was  a  hallway  where  the  rest 
of  the  staff  agencies  were  located.     As  I  recall,  the 
last  offices  on  that  particular  hallway  was  the  brigade 
S2  shop. 

Q.  Now,    sir,   when  you  would  walk  up  to  the 

brigade  S2  shop,   could  you  just  walk  in  the  door? 

A.  No.     It  was  cypher  lock  secured  and  you  had  to 

have  access  to  the  cypher  lock  to  get  in,   into  the  2 
shop . 

Q.  And  did  you  have  access  to  that? 

A .  I  did  not . 

Q.  And  what  office  of  individuals  were  the  ones 

that  had  access? 

A.  The  S2. 

Q.  And  was  an  individual  allowed  to  go  into  the 

S2  office  without  an  escort? 

A.  Not  to  my  knowledge,  no. 
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Q.  Sir,   when  did  you  first  find  out  about  PFC 

Manning's  at  the  time  alleged  misconduct? 

A.  I  don't  remember  the  date,  but  the  way  it  came 

about  to  me  was  I  was  coming  back  from  dinner  or 
something  like  that  one  evening  and  I  was  approached  by 
either  my  XO  or  my  DCO  and  they  told  me  that  we  had  been 
instructed  to  secure  Manning  and  his  computer  and  he  was 
being,   agencies  were  coming  to  pick  him  up  and  take  him 
away . 

Q.  And,    sir,   what  was  your  understanding  of  the 

nature  of  the  misconduct  at  that  time? 

A.  At  that  time  I  didn't  have  any  idea. 

Q.  And  then  what  was  your  understanding  once  you 

were  briefed  and  understood  what  it  was? 

A.  I  had  a  general  understanding  that  he  had 

pulled  classified  information  from  — 

MR.   COOMBS:     Objection,   Your  Honor. 
THE  COURT:  Yes. 

MR.   COOMBS:     Hearsay  and  relevance. 

THE  COURT:     What  is  the  non-hearsay  purpose? 

MR.   FEIN:     Well,   the  effect  on  listener,  Your 
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Honor . 

THE  COURT:     Where  are  you  going  with  that? 

MR.   FEIN:     Ma'am,   it  goes  ultimately  to 
proving,   providing  facts  to  prove  it  was  both  prejudicial 
to  order  and  service  discredited,   some  of  the  acts  that 
have  not  been  pled  guilty  to. 

THE  COURT:     Why  don't  you  just  say  after  you 
were  briefed  in  your  questions.  Sustained. 

MR.   COOMBS:     Your  Honor,    just  — 

THE  COURT:     Sustained  on  hearsay,   not  on 

relevance . 

MR.   COOMBS:     Yes,   Your  Honor.     Just  for  the 
defense  purpose  on  the  relevance,  we  believe  that  the 
relevant  conduct  for  prejudicial  order  or  discipline 
would  be  the  direct  acts,   not  any  government  acts  after 
that.     So  I'm  not  for  sure  where  Major  Fein  will  be 
going,  but  the  direct  acts  would  be  relevant  under  134, 
under  that,   so  — 

THE  COURT :     Why  don ' t  we  let  him  go  and  get 
there,   and  if  it's  not  for  a  proper  purpose  I  can 
disregard  it . 
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MR.   COOMBS:     Yes,   Your  Honor. 
THE  COURT:     Go  ahead. 

BY  MR.  FEIN: 

Q.  Sir,   how  did  you  react  when  you  first  found 

out  about  PFC  Manning's  at  the  time  alleged  misconduct? 
A.  I  was  stunned. 

Q.  Why,  sir? 

A.  The  last  thing  I  anticipated  was  an  internal 

security  breach  from  one  of  our  own. 

Q.  Sir,   were  you  ever  in  a  meeting  with  your 

brigade  staff  that  the  alleged  misconduct  was  discussed? 

A.  Yes. 

Q.  And  what  was  your  reaction  based  off  of  those 

discussions  during  your  brigade  staff  meetings? 

A.  After  I  got  past  my  initial  reaction,    I  pulled 

the  staff  together  because  I  wanted  to  do  an  internal 
look  to  determine  what  if  anything  we  had  or  had  not  done 
that  may  have  led  to  the  ability  for  this  to  occur,   so  we 
could  do  some  self  correcting  and  move  forward  if  we 
needed  to . 

As  part  of  that  I  described  from  my 
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perspective  what  I  thought  had  happened.     My  read  of  my 
staff  at  that  time  was  it  was  like  a  funeral-like 
atmosphere  fell  over  that  crowd,   that ' s  the  best  way  I 
can  describe  it.     They  were  angry,   sad,  grief, 
frustrated,   all  at  the  same  time.     That's  how  I  would 
describe  it . 

Q.  Sir,   before  you  learned  of  PFC  Manning's  at 

the  time  alleged  misconduct,   how  would  you  describe  the 
overall  morale  of  your  staff  and  brigade? 

A.  So  probably  one  of  the  highest  points  I  had 

been  on  in  my  entire  command  duration,   and  that's,  that's 
because  we  had  really  hit  all  of  our  objectives  in  our 
conditions  for  meeting  the  mission  requirements.     You  had 
asked  and  I  had  mentioned  that  we  were  the  PCT  identified 
to  begin  responsible  drawdown .     That  didn ' t  happen  by 
accident .     A  lot  of  work  went  into  achieving  those 
objectives  and  being  able  to  brief  General  Oderno  that  we 
were  ready.     That  was  in  large  part  through  the 
achievements  of  the  staff  and  the  subordinate  units .  So 
they  were  feeling  very  good  about  that . 

The  Iraqi  population  was  cooperating  with 
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each  other,   things  were  moving  in  the  right  direction 
with  their  own  unity  efforts.     Security  forces  were 
reaching  a  high  point  in  their  own  performance .  All 
those  things  were  occurring.     And  then  out  of  the  blue  we 
had  this  incident  occur. 

Q.  So,   sir,   once  you  and  the  brigade  staff 

learned  of  PFC  Manning's  then  alleged  misconduct,  how 
would  you  describe  the  morale  of  the  brigade? 

A.  It  took  a  hit.     We  had  all  those  good  things 

going  and,   to  put  it  in  context,   you  know,   this  was  the 
beginning  of  the  drawdown,    so  I  had  a  large  number  of, 
probably  50  percent  of  the  force  that  had  anywhere  from 
two  to  six  deployments  in  theater  before  that,   so  what 
they  were  seeing  is  the  fruits  of  their  labor  over  the 
past  ten  years  coming  to  fruition  and  feeling  pretty  good 
about  it.     So  all  that  energy  and  effort  and  sacrifice 
that  had  gone  into  it  was  coming  to  a  completion .  And 
then  we  had  this  incident  occur,   which  the  unit 
collectively  felt  was  like  a  blemish  on  its  otherwise 
pretty  stalwart  record. 

Not  to  mention  what  it  does  to  trust  to  a 
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large  degree  in  a  formation. 

Q.  What  do  you  mean  by  that,  sir? 

A.  Well,   earlier  I  made  an  analogy  to  security 

breach.     In  this  case  it  was  cyber  security.     But  to  my 
infantryman's  way  of  looking  at  things,   trust  is  critical 
to,   it ' s  at  the  foundation  of  everything  we  do.     So  if 
you 're  in  a  combat  patrol ,   you  got  a  lead  helmet  with 
front  security,   you  got  a  trail  helmet  with  trail 
security,   and  you  got  left  and  right  flank  security. 
Every  soldier  in  that  formation  knows  that  the  other 
soldier ' s  got  their  peace  and  security .     They  know  it  in 
their  blood  and  in  their,    in  the  fiber  of  their  body. 
And  that  trust,   that  that's  true,   is  crucial  to  them 
staying  focused  on  their  part  of  the  security  piece .  It 
is  interwoven  and  relies  upon  each  other,    just  that 
mutual  knowledge  that  I  got  you,   you  got  me.     That's  how 
we  roll . 

If  any  one  of  those  violates  that,   now  that 
soldier  with  the  lead  security  is  looking  to  his  left  and 
going  is  there  a  gap  in  security  over  here?     I'm  taking 
my  eyes  off  my  job,    I'm  putting  it  over  here.     And  the 
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whole  thing  starts  to  unravel .     And  so  that ' s  a  simple 
example,   but  the  analogy  is  true  in  every  echelon  of 
command.     That  notion  is  what  hit  at  the  morale  and  for 
at  least  a  while  the  operational  effectiveness  of  the 
formation . 

MR.   FEIN:     Thank  you,  sir. 

Your  Honor,   no  further  questions. 

THE  COURT:     Cross  examination. 

MR.   COOMBS:     Yes,   Your  Honor.      If  we  could, 
could  we  have  a  ten  minute  comfort  break? 

THE  COURT:     All  right.     Why  don't  we  make  it 
15?     We'll  be  in  recess  until  five  minutes  after  12. 

Once  again,   during  the  recess,   please  don't 
discuss  your  testimony  or  knowledge  of  the  case  with 
anyone . 

THE  WITNESS:     Yes,  ma'am. 
(BRIEF  RECESS . ) 

THE  COURT:     Court  is  called  to  order.  Let 
the  record  reflect  all  parties  present  when  the  court 
last  recessed  are  again  present  in  court .     The  witness  is 
on  the  witness  stand  and  Mr.   Coombs  is  at  the  lectern. 
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MR.   COOMBS:     Thank  you,  ma'am. 
CROSS  EXAMINATION 

BY  MR.  COOMBS: 

Q.  Colonel  Miller,    I  want  to  begin  by  talking 

about  the  connectivity  problems  that  you  had  during  the 
deployment,  okay? 

A .  Okay . 

Q.  Now,   during  the  deployment  you  started  having 

connectivity  problems  with  your  weekly  updates  to  Major 
General  Wolfe,   is  that  correct? 

A.  Yes. 

Q.  And  Major  General  Wolfe  was  the  division 

commander? 

A.  Correct. 

Q.  And  it  was  during  this  time  you  found  out  that 

the  loss  of  connectivity  was  due  to  unauthorized  data  on 
the  system? 

A.  No. 

Q.  Is  that  what  your  testimony  is  right  now? 

A.  That  I  understood  that  there  was  a  volume  of 

stuff  on  the  network  that  was  causing  part  of  the 
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problem,   so  the  data,   authorized  or  unauthorized,  was 
part  of  that  problem. 

Q .  All  right .     So  — 

A.  So  all  I'm  saying  it  wasn't  solely  because  of 

that. 

Q .  All  right .     So  let  me  make  sure  I  understand 

your  answer.     During  this  time  period  when  you  were 
having  connectivity  problems,   you  found  out  that  part  of 
the  problem  was  due  to  unauthorized  data  being  on  the 
system? 

A.  Yeah,   that  it  was  contributing  to  the  volume 

of  stuff  that  was  on  the  system  which  was  causing  the 
problem  as  I  understood. 

Q.  And  specifically  it  was  unauthorized  data? 

A.  Can  you  ask  that  again? 

Q.  Yes.     Specifically  when  you  were  talking  about 

data,   you  were  made  aware  that  there  was  unauthorized 
data  on  the  system. 

A.  As  part  of  the  larger  data  problem.     So,  for 

example,   UAV  feeds  are  authorized  data  flow.     They  take 
huge  chunks  of  bandwidth.     So  that  was  part  of  the 
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problem  also . 

Q.  Right.     But  my  question  is  you  were 

specifically  told  that  there  was  unauthorized  data  on  the 
system? 

A.  Yes. 

Q.  And  the  person  that  basically  addressed  this 

issue  for  you,   this  unauthorized  data,  was  Captain 
Cherpko? 

A.  Yes. 

Q.  And  with  regards  to  Captain  Cherpko,    it  was 

your  opinion  that  he  was  the  only  person  really  in  the  S6 
shop  who  had  the  skills  necessary  to  fix  this  problem? 

A.  Yeah,   he  certainly  had  the  most  capability, 

yeah . 

Q.  And,   you  know,    something  obviously  that  could 

also  have  helped  improve  the  connectivity  problems  that 
you  were  having  was  the  removal  of  unauthorized  media, 
correct? 

A.  Yes. 

Q.  So  you  could  have,   for  example,   insured  that 

movies,  music,   games,   executable  files,   those  things  that 
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should  not  be  on  a  SIPRNET  system  were  removed? 
A.  Yes. 

Q.  Because  they  were  taking  up  a  lot  of  space? 

A .  I  don ' t  know  how  much  space  they  took  up . 

Q.  Did  Captain  Cherpko  ever  come  to  you  to  inform 

you  that  unauthorized  media  was  taking  up  a  lot  of  space? 
A.  No. 

Q.  Did  he  ever  inform  you  about  the  problem  of 

unauthorized  media  on  the  T  drive? 
A.  No. 

Q.  So  to  your  knowledge,   Captain  Cherpko  never 

came  to  you  and  said  or  through  I  guess  who  had  been  your 
XO,    sir,   we've  got  unauthorized  media  on  the  T  drive  and 
that 1 s  causing  us  a  problem? 

A.  No.     The  XO,   Brian  Kerns,   came  to  me  with 

here ' s  what  we  found  is  lending  itself  to  the  problem 
we ' re  having . 

Q .  All  right .     So  whether  it  be  through  Captain 

Cherpko,  Lieutenant  Colonel  Kerns,  were  you  made  aware 
that  there  was  unauthorized  music,  movies  and  games  on 
the  shared  drive? 
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A.  Yes. 

Q.  And  based  upon  being  made  aware  of  that,  what 

direction  did  you  give? 

A.  I  told  them  to  clean  it  up  as  part  of  their 

overall  efforts  to  and  other  steps  they  were  taking  to 
get  the  connectivity  working  again. 

Q.  And  was  it  just  the  direction  that  you  just 

said  there,   to  clean  it  up,   or  did  you  actually  give 
specific  directions? 

A.  I  didn't  give  specific  guidance. 

THE  COURT:     Can  I  interrupt  you  for  a  second? 
You  said  you  told  them.     Who  is  them? 

THE  WITNESS:     So  we  had  the  XO,   Brian  Kerns 
was  the  guy  who  I  had  shepherding  this  entire  staff 
effort  because  that's  what  he  is,   he's  a  chief  of  staff. 
So  I  don't  remember  if  Cherpko  was  in  the  room,   who  else 
was  present,  maybe  Brian,  maybe  Cherpko,  maybe  the 
deputy,   he  may  or  may  not  have  been  present.     But  they 
came  back  and  essentially  said  these  are  the  things  we 
see  lending  itself  to  the  problem. 

And  we  —  they  had  a  recommendation  for 
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clearing  some  of  that  up.      It  included  getting  rid  of  the 
unauthorized  media,   it  included,   like  I  had  mentioned, 
some  other  measures  like  taking  certain  systems  off  and 
adding  to  the  protocols  to  control  when  things  were  being 
accessed  when.     So  I  said,   yeah,   let's  get  after  that. 
And,   again,    I  don't  remember  the  exact  laundry  list  of 
recommendations  they  had,   but  I  said,   yes,   let's  do  that. 

Q.  And  when  you  gave  the  guidance  to  your  staff 

basically  to  correct  the  problem,   did  you  ever  receive 
word  back  through  your  staff  that  the  problem  was 
persistent,   meaning  that  once  it  was  removed  it  was 
getting  placed  back  on  the  T  drive? 

A.  No,   not  that  I  recall,  no. 

Q.  Did  you  ever  get  a  requested  brief  back  of 

your  staff  of  now  that  I  gave  you  the  guidance  to  go 
correct  it,   come  back  to  me  by  X  date  and  tell  me  what 
you  did  and  what  your  results  were? 

A.  No,    I  don't  think  so. 

Q .  With  regards  to  the  problem,   once  you ' re  aware 

of  the  problem,   did  the  brigade  ever  conduct  any  training 
on  what  type  of  media  a  soldier  could  and  could  not  put 
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on  the  shared  drive? 

A.  Not  formalized. 

Q.  And  what  do  you  mean  by  that? 

A.  There  wasn't  a  class  with  a  sign-in  roster  or 

that  kind  of  thing. 

Q.  So  was  there  any  informal  training  done  that 

you 1  re  aware  of  to  tell  soldiers  what  they  could  and 
could  not  put  on  the  shared  drive? 

A.  I  wouldn't  classify  it  as  training.      I  believe 

what  happened  was  guidance  was  put  out  through  staff 
challenges  of  what  had  to  be  cleaned  up. 

Q.  All  right.     And  when  you  say  you  believe,  was 

that  because  you  gave  that  directive  or  you  just  believe 
that  might  have  been  done  based  upon  your  initial 
directive  of  clean  it  up? 

A.  Because  it  was  part  of  the  initial  guidance  to 

take  action . 

Q.  Okay.     Do  you  know  whether  or  not  at  any  time 

during  the  deployment  there  was  any  sort  of  discussion  on 
executable  files,   files  that  you  could  put  on  the  shared 
drive  or  not? 
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A.  No. 

THE  COURT:     Does  that  mean  you  don't  recall 
or  there  was  none? 

THE  WITNESS:     Ask  the  question  again,  please. 

MR.   COOMBS:  Yes. 
BY  MR.  COOMBS: 

Q.  Do  you  know  whether  or  not  during  the 

deployment  there  was  ever  any  training  on  what  executable 
files  you  could  or  could  not  place  on  the  shared  drive, 
the  T  drive? 

A .  I  don ' t  know .      I  don ' t  know  that  we  were  in 

the  business  of  putting  files  on  drives,    so  — 

Q.  The  T  drive  was  the  shared  drive,  right? 

A .  Right . 

Q.  And  soldiers,   any  section  could  share,  excuse 

me,   save  stuff  to  the  T  drive? 
A .  Right . 

Q.  So  do  you  know  from  the  brigade  standard 

whether  or  not  there  was  any  training  or  guidance  given 
on  executable  files  that  you  could  or  could  not  save  on 
the  shared  drive? 
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A .  I  don ' t  know . 

Q.  Now,   during  the  deployment,   were  you  ever 

informed  that  there  was  unauthorized  media  within  the 
T-SCIF? 

A.  No. 

Q.  Did  you  later  learn  that  there  was 

unauthorized  media  in  the  T-SCIF? 
A.  No. 

Q.  So  from  your  standpoint,   even  today  I  guess, 

you  didn't  know  whether  or  not  there  was  unauthorized 
media  on  your  T-SCIF? 

A.  Well,   actually  today  I  can  say  no,   not  for 

sure,    I  presume  just  part  of  the  overall  read  that  we  had 
unauthorized  media,   I  didn't  discount  or  include  the 
T-SCIF  in  the  read,   so  I  wasn't  specifically  aware  of 
anything  in  the  T-SCIF. 

Q.  The  reason  why  I  ask  is  my  understanding  is 

like  when  you  go  in  to  kind  of  like  the  TOC  was  and  the 
T-SCIF,   the  T-SCIF  had  a  cypher  lock,  right? 

A.  Correct. 

Q.  So  that  was,   would  you  agree  with  me,   a  much 
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more  secure  area  than  maybe  the  TOC  because  of  the  cypher 
lock? 

A.  Access-wise,  yeah. 

Q.  And  also  access-wise  it  was  much  more  limited 

as  to  who  could  go  into  the  T-SCIF? 
A.  True. 

Q.  So  you  would  want  to  be,    I  guess  that's 

because  you ' re  very  concerned  on  who  goes  into  the  T-SCIF 
and  what  happens  in  the  T-SCIF? 

A.  Yep,    certainly  who  goes  in. 

Q.  And  then  also  the  information  that  you  have  in 

the  T-SCIF  you're  concerned  about? 
A.  Yeah. 

Q.  So  were  you  ever  made  aware  that  soldiers  in 

the  T-SCIF  had  unauthorized  media  like  movies,  music  and 
games? 

A.  No. 

Q.  And  when  you  talked  about  I  guess  the,   in  your 

term  it  was  the  Fobbit  where  if  you  never  go  anywhere, 
you  kind  of  go  a  little  stir  crazy  just  being  on  the  FOB, 
was  your  — 
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THE  COURT:     Let  the  record  reflect  the 
witness  is  nodding  his  head. 

MR.   COOMBS:      I'm  sorry.     Thank  you,  ma'am. 
BY  MR.  COOMBS: 

Q.  Was  your  guidance  to  combat  that  in  the  T-SCIF 

you  would  allow  music,   movies  and  games  on  a  SIPRNET 
computer? 

A.  No. 

Q.  And  if  you  were  made  aware  of  that,   sir,  would 

you  have  put  a  stop  to  that  practice? 

A.  I  don't  know.     Not  necessarily. 

Q.  And  why  not? 

A.  For  the  same  reasons  I  just  described,   that  I 

thought  there ' s  some  degree  of  benefit  to  those  kind  of 
luxuries,   if  you  want  to  call  it  that.     I  don't  see 
immediately  as  a  layman  the  operational  problem  with 
that. 

Q.  And  if  your  S6,   Captain  Cherpko,    came  to  you, 

assistant  S6  actually,  came  to  you  and  said,  sir,  the 
problem  with  that  is  the  music,  movies,  games,  or  the 
executable  files  are  a  security  risk,   they  should  not  be 
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on  the  SIPRNET  computer,    if  you  received  that  guidance, 
would  you  then  not  want  to  have  that  stuff  on  the  SIPRNET 
computer? 

A.  Yes.     And  or  I  would  have  wanted  to  peel  that 

onion  further  back  and  determine  exactly  what  the  nature 
of  the  security  risk  is,   and  then  decide  whether  or  not  I 
wanted  to  challenge  that  and  run  a  waiver  on  it  through 
the  green  chat  channels  to  determine  whether  it  was 
really  a  risk  or  not .     Because  sometimes  these  risks  — 
the  reason  given  for  it ' s  not  authorized  is  because 
there's  a  document  that  says  this  is  not  authorized  and 
therefore  it's  a  risk. 

What  I  always  want  to  get  to  is  why,   not  the 
document,   but  what  was  the  logic  behind  that  being  put  in 
that  document  so  I  can  get  to  the  root  reason.     Then  we 
can  assess  the  root  reason  against  what  we're  doing  and 
find  if  there  really  is  a  physical.     But  either  way  I 
would  want  to  run  it  on  ground  and  get  permission  or  not . 

Q.  If  your  S6  said,   hey,   this  stuff  is  a  security 

risk  because  it  opens  up  our  network  to  outside  intrusion 
and  you  ran  that  to  ground  and  that  was  true,   then  I 
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imagine  you  would  not  allow  that  in  your  T— SCIF? 
A.  Correct. 

Q.  And  if  the  S6  said,   hey,   the  same  thing,  that 

this  is  a  problem  because  it  opens  up  our  network  to 
outside  individuals,   and  you  ran  that  to  ground  and  that 
wasn't  true,   that  was  just  an  S6  being  an  S6  being  too 
concerned,  but  the  reality  was  there  was  no  problem,  what 
would  you  do  in  that  situation,  sir? 

A.  But  it  was  still  a  policy  or  regulatory 

unapproved? 

Q.  Yes,  sir. 

A.  Then  I  would  want  to  run  it  back  up  through 

division  to  see  if  we  couldn't  get  an  exception,   if  there 
was  operational  benefit  that  was  worth  the  energy  to  do 
that,   then  I  may  have  wanted  to  look  into  it  to  see  if  we 
could  get  a  waiver. 

Q.  And  did  you  ever  do  that,   to  your  knowledge? 

A.  No. 

Q.  Ask  for  a  waiver? 

A .  No ,    I  did  not . 

Q.  Would  that  apply  and  —  you  talked  about  the 
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mIRC  chat  program,   right?     You're  familiar  with  that, 
sir? 

A.  Yes. 

Q .  And  did  you  ever  ask  for  a  waiver  to  have  the 

mIRC  chat  program  put  on  the  DCGS-A  computer  at  your  S2 
section? 

A.  No. 

Q.  Now,   you  talked  about  also  having  SIPRNET  and 

you  used  it  all  of  the  day,  correct? 
A.  All  the  time,  yeah. 

Q.  All  the  time.     And  my  understanding  also, 

having  been  deployed,   that  SIPRNET  becomes  basically  your 
everyday  computer  that  you're  using,    is  that  right? 

A.  I  would  agree  with  that,  yeah. 

Q.  And  that's  how,   you  know,    soldiers  communicate 

with  one  another  and  that ' s  basically  what  they  work  on 
on  a  daily  basis,   is  that  correct? 

A.  Yeah,    it's  like  I  described  in  my  earlier 

statement .     To  me  the  analogy  would  be  it  is  as  normal  as 
using  the  computers  you're  using  here  as  part  of  this 
process,    just  make  them  SIPR,    same  thing. 
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Q.  And,    sir,   how  many  people  do  you  remember,  and 

I'm  not  trying  to  give  you  like  a  hard  number  where 
you're  like,  oh,  3,400,  but  what  percentage  of  your 
brigade  do  you  think  had  access  to  SIPRNET? 

A.  I'm  going  to  swag,   20  percent.     What  I'm 

really  thinking  about  is  it's  a  really  a  breakdown. 
Staffs  had  access.     The  preponderance  of  my  force  were 
trigger  pulling  soldiers,   most  of  those  soldiers  did  not. 
So  company  level,   below,   very,   very  little.  Battalion 
staff  level  functions,   quite  a  bit. 

Q.  And  when  you're  talking  the  battalion  staff, 

the  people  who  were  probably  for  the  most  part  the 
Fobbits,  correct? 

A .  Right . 

Q.  What  percentage  of  the  battalion  staff  and 

brigade  staff  do  you  believe  had  access  to  SIPRNET? 
A.  The  majority. 

Q.  And  with  regards  to  SIPRNET,    from  your 

knowledge,   did  you  know  that  you  could  go  to  the 
Net-Centric  Diplomacy  database  on  SIPRNET? 

A.  Say  that  again. 
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Q.  Did  you  know  that  you  could  go  to  the 

Net-Centric  Diplomacy  database  on  SIPRNET? 
A.  No,    I  didn't. 

Q.  Do  you  recall  ever  asking  your  S2  at  the  time, 

Captain  Lynn,   to  start  incorporating  guidance, 
information  from  the  cables  into  their  work  products? 

A.  No. 

Q.  With  regards  to  the  SIPRNET,   do  you  know  if 

your  brigade  conducted  any  training  on  where  a  soldier 
could  or  could  not  go  on  the  SIPRNET? 

A .  No ,    I  do  not . 

Q.  Do  you  know  if  your  brigade  put  out  any 

restrictions  on  what  a  soldier  could  or  could  not  look  at 
on  the  SIPRNET? 

A.  No. 

Q.  When  we  talk  about  kind  of  the  Fobbit 

mentality  and  using  basically  SIPRNET  as  your  everyday 
Internet,   if  a  soldier  wanted  to,   if  they  were  just 
otherwise  kind  of  not  doing  anything  and  they  just  wanted 
to  surf  the  SIPRNET,   was  that  something  that  your  brigade 
put  a  restriction  on? 
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A.  Not  that  I  recall. 

Q.  So  if  I  were  Private  Coombs  and  I'm  on  my 

SIPRNET  machine  and  you  walked  by  and  you  said,  Private 
Coombs,  what  are  you  up  to,   and  I  say,   hey,   sir,  nothing, 
it's  kind  of  a  slow  day,    I'm  just  surfing  the  SIPRNET, 
that  would  not  be  a  problem  in  your  eyes  as  a  brigade 
commander? 

A.  It  wouldn't  register  as  a  problem  to  me. 

Q.  Now,   with  regards  to  downloading  stuff  from 

the  SIPRNET,   do  you  know  if  your  brigade  put  out  any 
guidance  or  restrictions  on  what  you  could  or  could  not 
download  from  the  SIPRNET? 

A.  Download  to? 

Q.  To  a  CD,   say,   for  example,   that  you 

appropriately  labeled,   or  down  to  your  SIPRNET  machine. 

A.  Yeah.     So  I  don't  recall  any  guidance  on  what 

could  be  downloaded  to  your  machine .     I  don ' t  remember 
when  the  guidance  came  out  for  not  downloading  to 
removable  drives,   whether  that  was  before  or  after  this 
time  period,   but  that  wasn't  brigade  guidance,   that  was 
Army  guidance .      I  don ' t  remember  whether  that  fell  within 
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this,   this  timeframe  or  not.     But  downloading  at  some 
point ,   the  Army  said  we ' re  not  doing  that  any  more . 

Q.  Sir,    from  your  experience,   and  I  know  you  were 

on  SIPRNET,   do  you  recall  ever  saving  something  that  you 
got  from  SIPRNET  on  to  your  computer? 

A.  I  don't  have  a  specific  memory,   but  I  probably 

did. 

Q.  And  do  you  know  from  the  brigade  level  whether 

or  not  there  was  any  sort  of  restriction  in  the  manner  in 
which  you  saved  information?     If  you  decided  I  want  to 
save  something  from  the  SIPRNET  that  there  was  a 
restriction  on  the  manner  in  saving  that  information? 

A.  Manner  like  how  you  click  on  something  and 

select  save  and  — 

Q .  Right . 

A.  No. 

Q.  Now,    I  want  to  ask  you  a  few  questions  about 

PFC  Manning.  You  talked  about  the  fact  that  you  met  him 
before,   is  that  correct,  sir? 

A.  As  I  described  earlier,  yeah. 

Q.  And  that  was  basically  him  conducting  a  brief 
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in  front  of  you? 

A.  And  the  other  staff  and  some  commanders,  yes. 

Q.  And,    sir,   was  that  before  the  deployment  or 

was  that  during  the  deployment? 

A.  Before. 

Q.  And  based  upon  what  you  saw,   do  you  recall 

saying  you  thought  he  was  a  sharp  briefer? 
A.  Yes. 

Q.  And  even  though  you  thought  he  was  a  sharp 

briefer,   you  also,   do  you  recall  saying  that  you  believed 
that  he  wasn't  experienced  at  analysis? 

A.  I  don't  recall  saying  that,   but  — 

Q.  Would  anything  help  refresh  your  memory? 

A.  Well,    if  in  the  context  of  the  briefings,  the 

briefings  weren't  really  about  analysis,   they're  about 
here's  the  situation  that's  taking  place,   so  there  wasn't 
a  lot  of  analysis  that  would  go  into  it .     So  I  may  have 
said  that,  but,  yeah. 

Q.  And  it's  okay  because  this  was  a  long  time 

ago,   you  know.     Do  you  recall  saying  he  was  not 
experienced  at  analysis,   but  he  was  fine  in  making 
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presentations  ? 

A.  Yes. 

Q .  Okay .     And  even  though  he  wasn ' t  experienced 

in  analysis,   you  would  agree  with  me  that  that  might  be 
just  because  he  was  a  junior  enlisted  soldier  at  that 
time? 

A.  Sure. 

Q.  He  was  a  young  soldier? 

A.  Yeah. 

MR.   COOMBS:     Sir,   thank  you.      I  don't  have 
any  further  questions  for  you. 

THE  WITNESS:  Okay. 

THE  COURT:  Redirect. 

MR.   FEIN:     May  I  have  a  moment,   Your  Honor? 

THE  COURT:  Yes. 

MR.   FEIN:     Yes,  ma'am. 

THE  COURT:     Go  ahead. 

REDIRECT  EXAMINATION 

BY  MR.  FEIN: 

Q.  Sir,   do  you  know  what  an  executable  file  is? 

A.  Sort  of. 
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Q.  Okay,    sir.     What  is  it,    in  your  knowledge  of 

it,  sir? 

A.  It ' s  a  file  that  provides  some  sort  of 

function  for  off  the  hard  drive. 

THE  COURT :      I'm  sorry .     Can  you  say  that  one 

more  time? 

THE  WITNESS:      It  provides  some  kind  of 
function  off  of  the  hard  drive. 
BY  MR.  FEIN: 

Q.  All  right,    sir.     And  Mr.   Coombs  just  asked  you 

a  few  questions  about  if  you  walked  by  a  soldier  and  saw 
a  soldier  on  SIPRNET  doing  some  actions.      I  have  a 
similar  question,    sir.      If  you  were  to  walk  by  a  soldier 
in  the  SCIF  on  SIPRNET  and  saw  a  soldier  using  a  computer 
tool  that  he  put  on  there  to  download  over  250,000 
documents  to  burn  on  to  a  CD,   would  you  have  stopped 
that? 

MR.   COOMBS:     Objection.  Argumentative. 
THE  COURT:  Overruled. 

BY  MR.  FEIN: 
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Q. 


I ' 


m  sorry,   sir.     Could  you  please  answer  that? 


A. 


Yes. 


Q. 


And,    sir,   were  soldiers  in  your  brigade 


authorized  to  burn  CDs  of  classified  information  and  use 
them  for  personal  use? 


MR.   COOMBS:     Thank  you,  sir. 

THE  COURT:     Any  cross? 

MR .   COOMBS :     No ,   Your  Honor . 

THE  COURT:     Temporary  or  permanent  excusal? 

MR.   FEIN:     Temporary,   Your  Honor. 

THE  COURT:     All  right.     Colonel  Miller, 


you're  temporarily  excused.     Please  don't  discuss  your 
testimony  or  knowledge  of  the  case  with  anyone  other  than 
the  counsel  or  the  accused  while  the  trial  is  going  on. 


recommends  that  we  take  a  lunch  recess  now  and  an 
extended  one  in  order  to  finalize  the  last  round  of 
stipulations . 

THE  COURT:     How  long  do  you  need? 


A. 


No. 


THE  WITNESS:     Yes,  ma'am. 


MR.   FEIN:     Ma'am,   the  United  States 
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MR.   FEIN:     May  I  have  a  moment,   Your  Honor? 
THE  COURT:  Yes. 

MR.   FEIN:     Ma'am,   we  plan  on  1430  reconvening 
and  we ' 11  notify  the  court  and  public  if  we  need  more 
time . 

THE  COURT:     All  right.     Anything  else  before 

we  recess? 

MR.   FEIN:     No,  ma'am. 
MR .   COOMBS :     No ,   ma  ' am . 

THE  COURT:     All  right.     Court  is  in  recess 

until  1430. 

(LUNCH  RECESS. ) 
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